LOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 04:06:37 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3f}]}}}}}}}}, 0x0) 04:06:38 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) 04:06:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001240)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'nr0\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(0xffffffffffffffff, &(0x7f00000002c0)='_', 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="4490dc95e8c7765c96f3cd1cef0da203ec44060bb0dd860fefb44b2d36682ba9440a48d54f91d9d7f05d", 0x2a) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x80000000}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000340)={0xe8, 0x200, 0x1, 0x3f, 0x5}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept(r3, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='}', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000380)='5', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)='C', 0x1}], 0x1, &(0x7f0000000b80)=[@mark={{0x36ffe6c7822f}}], 0x18}}], 0x3, 0x4008001) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x1, 0x3, 0x0, @remote}, 0x10) 04:06:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 04:06:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x8040000, 0xa00000}) 04:06:38 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3f}]}}}}}}}}, 0x0) 04:06:38 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) 04:06:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000d80ffff", 0x8) 04:06:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 04:06:38 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001240)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'nr0\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(0xffffffffffffffff, &(0x7f00000002c0)='_', 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000000c0)="4490dc95e8c7765c96f3cd1cef0da203ec44060bb0dd860fefb44b2d36682ba9440a48d54f91d9d7f05d", 0x2a) bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000080)={0x80000000}) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000340)={0xe8, 0x200, 0x1, 0x3f, 0x5}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept(r3, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='}', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000380)='5', 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a00)='C', 0x1}], 0x1, &(0x7f0000000b80)=[@mark={{0x36ffe6c7822f}}], 0x18}}], 0x3, 0x4008001) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x1, 0x3, 0x0, @remote}, 0x10) 04:06:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r1, &(0x7f0000000380), 0x1040c) close(r1) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 04:06:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 04:06:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) pwritev(r1, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x8040000, 0xa00000}) 04:06:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000d80ffff", 0x8) 04:06:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x0) 04:06:39 executing program 5: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x4048080) unshare(0x6c060000) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000008000000001f"], 0x14}}, 0x0) 04:06:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 04:06:39 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x38}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000003e40)) unshare(0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 04:06:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r1, &(0x7f0000000380), 0x1040c) close(r1) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 04:06:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000d80ffff", 0x8) 04:06:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x80000001, 0x8, 0x542d}, 0x40) 04:06:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 04:06:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x80000001, 0x8, 0x542d}, 0x40) 04:06:39 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="020000000d80ffff", 0x8) 04:06:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) 04:06:39 executing program 5: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x4048080) unshare(0x6c060000) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000008000000001f"], 0x14}}, 0x0) 04:06:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r1, &(0x7f0000000380), 0x1040c) close(r1) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 04:06:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x80000001, 0x8, 0x542d}, 0x40) 04:06:39 executing program 2: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x4048080) unshare(0x6c060000) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000008000000001f"], 0x14}}, 0x0) [ 390.178219][T20725] infiniband syz1: set active [ 390.208496][T20725] infiniband syz1: added bridge_slave_0 [ 390.393363][T20733] rdma_rxe: already configured on bridge_slave_0 [ 390.586712][T20725] RDS/IB: syz1: added [ 390.641287][T20725] smc: adding ib device syz1 with port count 1 [ 390.664203][T20725] smc: ib device syz1 port 1 has pnetid 04:06:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x38}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000003e40)) unshare(0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 04:06:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)='o', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) 04:06:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x12, 0x80000001, 0x8, 0x542d}, 0x40) 04:06:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r1, &(0x7f0000000380), 0x1040c) close(r1) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 04:06:41 executing program 5: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x4048080) unshare(0x6c060000) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000008000000001f"], 0x14}}, 0x0) 04:06:41 executing program 2: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x4048080) unshare(0x6c060000) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000008000000001f"], 0x14}}, 0x0) [ 391.812172][T20843] rdma_rxe: already configured on bridge_slave_0 04:06:41 executing program 1: r0 = socket(0x1d, 0x2, 0x6) bind$bt_rfcomm(r0, 0x0, 0x0) 04:06:41 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x38}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000003e40)) unshare(0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 04:06:41 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)='o', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) 04:06:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)='o', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) [ 392.133244][T20857] rdma_rxe: already configured on bridge_slave_0 04:06:42 executing program 1: r0 = socket(0x1d, 0x2, 0x6) bind$bt_rfcomm(r0, 0x0, 0x0) 04:06:42 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}]}, 0x38}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000003e40)) unshare(0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 04:06:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)='o', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) 04:06:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)='o', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) [ 392.437479][T20873] rdma_rxe: already configured on bridge_slave_0 04:06:42 executing program 1: r0 = socket(0x1d, 0x2, 0x6) bind$bt_rfcomm(r0, 0x0, 0x0) 04:06:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWCHAIN={0xc0, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x4, 0x4, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_UNIT={0xc}]}}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1c8}}, 0x0) 04:06:42 executing program 5: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x4048080) unshare(0x6c060000) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000008000000001f"], 0x14}}, 0x0) 04:06:42 executing program 2: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x4048080) unshare(0x6c060000) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x3c1, 0x0, 0x90, [0x200001c0], 0x0, 0x0, &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010300000008000000001f"], 0x14}}, 0x0) 04:06:42 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)='o', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) 04:06:42 executing program 1: r0 = socket(0x1d, 0x2, 0x6) bind$bt_rfcomm(r0, 0x0, 0x0) 04:06:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)='o', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast1}, 0x10) 04:06:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWCHAIN={0xc0, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x4, 0x4, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_UNIT={0xc}]}}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1c8}}, 0x0) 04:06:42 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00e6ffff170002"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 04:06:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWCHAIN={0xc0, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x4, 0x4, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_UNIT={0xc}]}}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1c8}}, 0x0) 04:06:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 04:06:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x30, r1, 0x89, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 04:06:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, @NFT_MSG_NEWCHAIN={0xc0, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}, @NFT_MSG_NEWOBJ={0x38, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x4, 0x4, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_BURST={0x8}, @NFTA_LIMIT_UNIT={0xc}]}}, @NFT_MSG_DELTABLE={0x88, 0x2, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x1c8}}, 0x0) 04:06:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00e6ffff170002"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 04:06:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 04:06:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x30, r1, 0x89, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 04:06:43 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 04:06:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 04:06:43 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00e6ffff170002"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 04:06:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x81, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ed3cd7d4648d3c579515e5a630e3f78a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "398ec220c308cf0166f0d325b45e2fec6278e7338fbb20efa8d06693e99b8de2"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x80}}, 0x0) 04:06:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x30, r1, 0x89, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 04:06:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 04:06:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x81, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ed3cd7d4648d3c579515e5a630e3f78a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "398ec220c308cf0166f0d325b45e2fec6278e7338fbb20efa8d06693e99b8de2"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x80}}, 0x0) 04:06:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 04:06:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\a\a\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="00000000ffffffff00000000090001007072696f00e6ffff170002"], 0x48}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 04:06:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 04:06:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x30, r1, 0x89, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x30}}, 0x0) 04:06:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x81, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ed3cd7d4648d3c579515e5a630e3f78a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "398ec220c308cf0166f0d325b45e2fec6278e7338fbb20efa8d06693e99b8de2"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x80}}, 0x0) 04:06:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 04:06:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 04:06:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 04:06:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 04:06:44 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000400000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x448, 0x2, [@TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xffc1, 0x200}}}]}]}}]}, 0x478}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:06:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x80, r1, 0x81, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "ed3cd7d4648d3c579515e5a630e3f78a"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "398ec220c308cf0166f0d325b45e2fec6278e7338fbb20efa8d06693e99b8de2"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_ID={0x1c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x80}}, 0x0) [ 395.118598][T21026] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:06:44 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_setlink={0x2c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) 04:06:44 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short}, 0x14) bind$802154_dgram(r0, &(0x7f0000000080), 0x14) sendmmsg$sock(r0, &(0x7f0000002240), 0x400000000000192, 0x0) [ 395.171839][T21026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 395.231118][T21026] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 395.357442][T21033] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:06:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 04:06:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 04:06:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 04:06:45 executing program 3: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 395.477593][T21035] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 395.497794][T21048] Unsupported ieee802154 address type: 0 04:06:45 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000400000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x448, 0x2, [@TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xffc1, 0x200}}}]}]}}]}, 0x478}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 395.715628][T21056] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 395.743588][T21048] Unsupported ieee802154 address type: 0 [ 395.752492][T21056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 395.787499][T21056] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 395.969173][T21065] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:06:45 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short}, 0x14) bind$802154_dgram(r0, &(0x7f0000000080), 0x14) sendmmsg$sock(r0, &(0x7f0000002240), 0x400000000000192, 0x0) 04:06:45 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short}, 0x14) bind$802154_dgram(r0, &(0x7f0000000080), 0x14) sendmmsg$sock(r0, &(0x7f0000002240), 0x400000000000192, 0x0) 04:06:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 04:06:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000400000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x448, 0x2, [@TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xffc1, 0x200}}}]}]}}]}, 0x478}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:06:46 executing program 3: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 396.206186][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 396.206203][ T26] audit: type=1800 audit(1637899605.971:161): pid=21058 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=15439 res=0 errno=0 [ 396.313322][T21086] Unsupported ieee802154 address type: 0 04:06:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) [ 396.371502][T21090] Unsupported ieee802154 address type: 0 [ 396.446491][T21091] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 396.570190][T21092] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 396.647792][T21092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 396.703011][T21092] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:06:46 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short}, 0x14) bind$802154_dgram(r0, &(0x7f0000000080), 0x14) sendmmsg$sock(r0, &(0x7f0000002240), 0x400000000000192, 0x0) 04:06:46 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short}, 0x14) bind$802154_dgram(r0, &(0x7f0000000080), 0x14) sendmmsg$sock(r0, &(0x7f0000002240), 0x400000000000192, 0x0) 04:06:46 executing program 3: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:06:46 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000002400ffffff7f00000000400000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x478, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x448, 0x2, [@TCA_RSVP_POLICE={0x444, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x81]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xffc1, 0x200}}}]}]}}]}, 0x478}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 396.982156][T21116] Unsupported ieee802154 address type: 0 04:06:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 397.038954][T21117] Unsupported ieee802154 address type: 0 [ 397.178572][T21121] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 04:06:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) [ 397.348696][T21134] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 04:06:47 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short}, 0x14) bind$802154_dgram(r0, &(0x7f0000000080), 0x14) sendmmsg$sock(r0, &(0x7f0000002240), 0x400000000000192, 0x0) [ 397.396700][T21134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 397.429471][T21134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 04:06:47 executing program 3: r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 04:06:47 executing program 5: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short}, 0x14) bind$802154_dgram(r0, &(0x7f0000000080), 0x14) sendmmsg$sock(r0, &(0x7f0000002240), 0x400000000000192, 0x0) 04:06:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) [ 397.680595][T21145] Unsupported ieee802154 address type: 0 [ 397.726409][T21146] Unsupported ieee802154 address type: 0 04:06:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 04:06:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 04:06:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r1, 0x209, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x2, 'ib\x00'}]}]}, 0x20}}, 0x0) 04:06:47 executing program 5: unshare(0x6c060000) unshare(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002d000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000001c000000000093768e69e6eb4a988c4e4feaa978f3ebb03a20cee4587ba3d05b53a620973746a1bac1cc9908e2ed2c3fed6a94b6fc8e8d3cd708719da0e014d21586a8bdc9bdf39a2fc27954f2d82761b362f7174650eb5fac84dfbbf75d68cdf73b0f8abba6bb02f3a0eeff9c9cb40b53f63afeea39e0c5bf2022a6d7eeb2b26d194e11b438c83739349eb2bc962b7fb2059edd4499ebf089f4b781778eb243e55b"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x29, 0x0, 0x4, 0x7fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @loopback, 0x20, 0x7}}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000100), &(0x7f0000000280)=0x30) unshare(0x72010100) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0}, 0x20) unshare(0x20000) 04:06:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 04:06:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 04:06:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r1, 0x209, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x2, 'ib\x00'}]}]}, 0x20}}, 0x0) 04:06:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 04:06:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r1, 0x209, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x2, 'ib\x00'}]}]}, 0x20}}, 0x0) 04:06:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 04:06:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 04:06:48 executing program 2: r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2000201e}) epoll_pwait(r0, &(0x7f0000001300)=[{}], 0x1, 0x0, 0x0, 0x4e) 04:06:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, r1, 0x209, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x2, 'ib\x00'}]}]}, 0x20}}, 0x0) 04:06:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 04:06:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x0) 04:06:50 executing program 5: unshare(0x6c060000) unshare(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002d000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000001c000000000093768e69e6eb4a988c4e4feaa978f3ebb03a20cee4587ba3d05b53a620973746a1bac1cc9908e2ed2c3fed6a94b6fc8e8d3cd708719da0e014d21586a8bdc9bdf39a2fc27954f2d82761b362f7174650eb5fac84dfbbf75d68cdf73b0f8abba6bb02f3a0eeff9c9cb40b53f63afeea39e0c5bf2022a6d7eeb2b26d194e11b438c83739349eb2bc962b7fb2059edd4499ebf089f4b781778eb243e55b"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x29, 0x0, 0x4, 0x7fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @loopback, 0x20, 0x7}}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000100), &(0x7f0000000280)=0x30) unshare(0x72010100) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0}, 0x20) unshare(0x20000) 04:06:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f00) 04:06:50 executing program 2: r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2000201e}) epoll_pwait(r0, &(0x7f0000001300)=[{}], 0x1, 0x0, 0x0, 0x4e) 04:06:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x4, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 04:06:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x0) 04:06:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x0) [ 400.693815][T21238] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:06:50 executing program 2: r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2000201e}) epoll_pwait(r0, &(0x7f0000001300)=[{}], 0x1, 0x0, 0x0, 0x4e) 04:06:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x4, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 04:06:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x0) 04:06:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x0) [ 401.093901][T21259] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:06:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x4, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 04:06:51 executing program 0: unshare(0x6c060000) unshare(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002d000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000001c000000000093768e69e6eb4a988c4e4feaa978f3ebb03a20cee4587ba3d05b53a620973746a1bac1cc9908e2ed2c3fed6a94b6fc8e8d3cd708719da0e014d21586a8bdc9bdf39a2fc27954f2d82761b362f7174650eb5fac84dfbbf75d68cdf73b0f8abba6bb02f3a0eeff9c9cb40b53f63afeea39e0c5bf2022a6d7eeb2b26d194e11b438c83739349eb2bc962b7fb2059edd4499ebf089f4b781778eb243e55b"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x29, 0x0, 0x4, 0x7fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @loopback, 0x20, 0x7}}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000100), &(0x7f0000000280)=0x30) unshare(0x72010100) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0}, 0x20) unshare(0x20000) [ 401.434645][T21274] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:06:52 executing program 5: unshare(0x6c060000) unshare(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002d000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000001c000000000093768e69e6eb4a988c4e4feaa978f3ebb03a20cee4587ba3d05b53a620973746a1bac1cc9908e2ed2c3fed6a94b6fc8e8d3cd708719da0e014d21586a8bdc9bdf39a2fc27954f2d82761b362f7174650eb5fac84dfbbf75d68cdf73b0f8abba6bb02f3a0eeff9c9cb40b53f63afeea39e0c5bf2022a6d7eeb2b26d194e11b438c83739349eb2bc962b7fb2059edd4499ebf089f4b781778eb243e55b"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x29, 0x0, 0x4, 0x7fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @loopback, 0x20, 0x7}}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000100), &(0x7f0000000280)=0x30) unshare(0x72010100) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0}, 0x20) unshare(0x20000) 04:06:52 executing program 2: r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2000201e}) epoll_pwait(r0, &(0x7f0000001300)=[{}], 0x1, 0x0, 0x0, 0x4e) 04:06:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x0) 04:06:52 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x0) 04:06:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x4, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 04:06:52 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) [ 402.471311][T21331] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:06:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x76, &(0x7f0000000080)={0x1}, 0x8) 04:06:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "38f576a7cc43dc86683860cb01e41745d05b3cb67fc1d7e3b1dcd65be85574a9100e40502ddb17b61728278d20afa62ccb04a78563957dbf98f4abd29a7c58"}, 0x60) accept(r0, 0x0, 0x0) 04:06:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r1, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)}, {0x0}], 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xd9c5, 0x8) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:06:52 executing program 0: unshare(0x6c060000) unshare(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002d000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000001c000000000093768e69e6eb4a988c4e4feaa978f3ebb03a20cee4587ba3d05b53a620973746a1bac1cc9908e2ed2c3fed6a94b6fc8e8d3cd708719da0e014d21586a8bdc9bdf39a2fc27954f2d82761b362f7174650eb5fac84dfbbf75d68cdf73b0f8abba6bb02f3a0eeff9c9cb40b53f63afeea39e0c5bf2022a6d7eeb2b26d194e11b438c83739349eb2bc962b7fb2059edd4499ebf089f4b781778eb243e55b"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x29, 0x0, 0x4, 0x7fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @loopback, 0x20, 0x7}}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000100), &(0x7f0000000280)=0x30) unshare(0x72010100) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0}, 0x20) unshare(0x20000) 04:06:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x76, &(0x7f0000000080)={0x1}, 0x8) 04:06:53 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 04:06:54 executing program 5: unshare(0x6c060000) unshare(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002d000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000001c000000000093768e69e6eb4a988c4e4feaa978f3ebb03a20cee4587ba3d05b53a620973746a1bac1cc9908e2ed2c3fed6a94b6fc8e8d3cd708719da0e014d21586a8bdc9bdf39a2fc27954f2d82761b362f7174650eb5fac84dfbbf75d68cdf73b0f8abba6bb02f3a0eeff9c9cb40b53f63afeea39e0c5bf2022a6d7eeb2b26d194e11b438c83739349eb2bc962b7fb2059edd4499ebf089f4b781778eb243e55b"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x29, 0x0, 0x4, 0x7fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @loopback, 0x20, 0x7}}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000100), &(0x7f0000000280)=0x30) unshare(0x72010100) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0}, 0x20) unshare(0x20000) 04:06:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x76, &(0x7f0000000080)={0x1}, 0x8) 04:06:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r1, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)}, {0x0}], 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xd9c5, 0x8) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:06:54 executing program 1: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "38f576a7cc43dc86683860cb01e41745d05b3cb67fc1d7e3b1dcd65be85574a9100e40502ddb17b61728278d20afa62ccb04a78563957dbf98f4abd29a7c58"}, 0x60) accept(r0, 0x0, 0x0) 04:06:54 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 04:06:54 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x76, &(0x7f0000000080)={0x1}, 0x8) 04:06:54 executing program 0: unshare(0x6c060000) unshare(0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000002d000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000001c000000000093768e69e6eb4a988c4e4feaa978f3ebb03a20cee4587ba3d05b53a620973746a1bac1cc9908e2ed2c3fed6a94b6fc8e8d3cd708719da0e014d21586a8bdc9bdf39a2fc27954f2d82761b362f7174650eb5fac84dfbbf75d68cdf73b0f8abba6bb02f3a0eeff9c9cb40b53f63afeea39e0c5bf2022a6d7eeb2b26d194e11b438c83739349eb2bc962b7fb2059edd4499ebf089f4b781778eb243e55b"], 0x24}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) sendfile(r4, r5, 0x0, 0xf03b0000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x29, 0x0, 0x4, 0x7fff, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @loopback, 0x20, 0x7}}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/244, 0x1202000, 0x1000}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000100), &(0x7f0000000280)=0x30) unshare(0x72010100) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={0x0}, 0x20) unshare(0x20000) 04:06:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r1, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)}, {0x0}], 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xd9c5, 0x8) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:06:54 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 04:06:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r1, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)}, {0x0}], 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xd9c5, 0x8) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:06:55 executing program 1: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "38f576a7cc43dc86683860cb01e41745d05b3cb67fc1d7e3b1dcd65be85574a9100e40502ddb17b61728278d20afa62ccb04a78563957dbf98f4abd29a7c58"}, 0x60) accept(r0, 0x0, 0x0) 04:06:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r1, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)}, {0x0}], 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xd9c5, 0x8) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:06:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r1, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)}, {0x0}], 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xd9c5, 0x8) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:06:56 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 04:06:56 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000bb5000)="ce", 0x1, 0xc840, 0x0, 0x0) 04:06:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda8c) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "38f576a7cc43dc86683860cb01e41745d05b3cb67fc1d7e3b1dcd65be85574a9100e40502ddb17b61728278d20afa62ccb04a78563957dbf98f4abd29a7c58"}, 0x60) accept(r0, 0x0, 0x0) 04:06:56 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x7fff, 0x4) 04:06:56 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffff80, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x8c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44001}, 0x2000c805) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_deladdrlabel={0x78, 0x49, 0x100, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, r6, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0xe}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x44) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000082280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101002000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 04:06:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6800000000c259006c0000000000040072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7", 0x20000289}, {&(0x7f00000003c0)="92f63d5f0014064305", 0x9}, {&(0x7f0000000000)="219e3369db45c394b721e4d4e9616e514286c42ef2f1c647", 0x18}], 0x3) 04:06:56 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x7fff, 0x4) 04:06:57 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) [ 407.341979][T21561] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:06:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0x12) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r1, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) writev(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000240)}, {0x0}], 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, 0x0, 0x0) sendfile(r3, r2, &(0x7f0000000080)=0xd9c5, 0x8) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 04:06:57 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x7fff, 0x4) 04:06:57 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 04:06:57 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x7fff, 0x4) [ 408.143139][T21565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:06:58 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x30) r1 = socket(0x10, 0x20000000802, 0x0) write(r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0xfe1e) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}}, 0x0) 04:06:58 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffff80, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x8c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44001}, 0x2000c805) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_deladdrlabel={0x78, 0x49, 0x100, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, r6, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0xe}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x44) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000082280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101002000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 04:06:58 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffff80, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x8c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44001}, 0x2000c805) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_deladdrlabel={0x78, 0x49, 0x100, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, r6, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0xe}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x44) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000082280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101002000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 04:06:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 04:06:58 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 408.714322][T21620] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.814612][T21629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 410.135617][T11947] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.175014][T11947] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.243540][T11947] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.303192][T11947] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.797323][T11947] IPVS: stopping backup sync thread 15523 ... [ 412.619803][T11947] device hsr_slave_0 left promiscuous mode [ 412.626378][T11947] device hsr_slave_1 left promiscuous mode [ 412.632719][T11947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.640607][T11947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.650318][T11947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.658055][T11947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.669240][T11947] device macvlan0 left promiscuous mode [ 412.675990][T11947] bridge0: port 3(macvlan0) entered disabled state [ 412.690472][T11947] device bridge_slave_1 left promiscuous mode [ 412.696872][T11947] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.705072][T11947] device bridge_slave_0 left promiscuous mode [ 412.716650][T11947] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.734153][T11947] device veth1_macvtap left promiscuous mode [ 412.740994][T11947] device veth0_macvtap left promiscuous mode [ 412.748326][T11947] device veth1_vlan left promiscuous mode [ 412.754342][T11947] device veth0_vlan left promiscuous mode [ 413.154036][T11947] team0 (unregistering): Port device team_slave_1 removed [ 413.171983][T11947] team0 (unregistering): Port device team_slave_0 removed [ 413.184806][T11947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.203043][T11947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.272996][T11947] bond0 (unregistering): Released all slaves [ 413.935436][ T6718] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 416.769975][T21736] chnl_net:caif_netlink_parms(): no params data found [ 416.838360][T21736] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.845929][T21736] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.854165][T21736] device bridge_slave_0 entered promiscuous mode [ 416.864219][T21736] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.871556][T21736] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.879864][T21736] device bridge_slave_1 entered promiscuous mode [ 416.910516][T21736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.924586][T21736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.959592][T21736] team0: Port device team_slave_0 added [ 416.971912][T21736] team0: Port device team_slave_1 added [ 417.000230][T21736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.008732][T21736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.036706][T21736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.050360][T21736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.059137][T21736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.085529][T21736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.126958][T21736] device hsr_slave_0 entered promiscuous mode [ 417.133963][T21736] device hsr_slave_1 entered promiscuous mode [ 417.142491][T21736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.151001][T21736] Cannot create hsr debugfs directory [ 417.263090][T21736] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.270360][T21736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.277887][T21736] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.285017][T21736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.345806][T21736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.363622][T15120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.372767][T15120] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.383190][T15120] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.392629][T15120] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 417.408872][T21736] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.422564][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 417.431535][ T9706] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.438703][ T9706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.453778][T15120] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.462446][T15120] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.469583][T15120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.492473][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 417.502577][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 417.518360][T15120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 417.529358][ T9708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.547354][T21736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.558869][T21736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 417.567769][T15120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.590381][ T9708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 417.598071][ T9708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 417.614513][T21736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.687268][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 417.717323][ T9708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 417.726166][ T9708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 417.733904][ T9708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 417.746734][T21736] device veth0_vlan entered promiscuous mode [ 417.761056][T21736] device veth1_vlan entered promiscuous mode [ 417.791550][ T9708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 417.800178][ T9708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 417.812478][T21736] device veth0_macvtap entered promiscuous mode [ 417.825090][T21736] device veth1_macvtap entered promiscuous mode [ 417.847101][T21736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 417.860666][T21736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.870941][T21736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 417.882021][T21736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.892383][T21736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 417.903215][T21736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.913229][T21736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 417.924016][T21736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.934468][T21736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 417.945496][T21736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.958940][T21736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.968216][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 417.976652][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 417.984576][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 417.993408][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 418.005893][T21736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 418.016771][T21736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.027964][T21736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 418.038726][T21736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.049327][T21736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 418.059977][T21736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.070832][T21736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 418.081480][T21736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.091647][T21736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 418.106605][T21736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.119940][T21736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.128687][T15113] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 418.138187][T15113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 418.248724][ T8763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.270062][ T8763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.301963][T15123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 418.318448][ T8763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.329508][ T8763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.342480][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 04:07:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6800000000c259006c0000000000040072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7", 0x20000289}, {&(0x7f00000003c0)="92f63d5f0014064305", 0x9}, {&(0x7f0000000000)="219e3369db45c394b721e4d4e9616e514286c42ef2f1c647", 0x18}], 0x3) 04:07:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 04:07:08 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 04:07:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0xe}]}, 0x30}}, 0x0) 04:07:08 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffff80, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x8c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44001}, 0x2000c805) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_deladdrlabel={0x78, 0x49, 0x100, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, r6, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0xe}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x44) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000082280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101002000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 04:07:08 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffff80, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x8c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44001}, 0x2000c805) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_deladdrlabel={0x78, 0x49, 0x100, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, r6, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0xe}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x44) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000082280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101002000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) [ 418.585876][T15123] Bluetooth: hci5: command 0x0409 tx timeout 04:07:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 04:07:08 executing program 1: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 04:07:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0xe}]}, 0x30}}, 0x0) [ 418.766929][T22104] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 418.828644][T22103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:07:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_KEY={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 04:07:08 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6800000000c259006c0000000000040072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7", 0x20000289}, {&(0x7f00000003c0)="92f63d5f0014064305", 0x9}, {&(0x7f0000000000)="219e3369db45c394b721e4d4e9616e514286c42ef2f1c647", 0x18}], 0x3) 04:07:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0xe}]}, 0x30}}, 0x0) 04:07:08 executing program 1: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 04:07:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) 04:07:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6800000000c259006c0000000000040072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="2c2da2ee918a3730f7", 0x20000289}, {&(0x7f00000003c0)="92f63d5f0014064305", 0x9}, {&(0x7f0000000000)="219e3369db45c394b721e4d4e9616e514286c42ef2f1c647", 0x18}], 0x3) 04:07:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0xe}]}, 0x30}}, 0x0) 04:07:09 executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffff80, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x8c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44001}, 0x2000c805) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_deladdrlabel={0x78, 0x49, 0x100, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, r6, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0xe}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x44) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000082280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101002000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 04:07:09 executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="8d", 0x1}], 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0xffffffffffffff80, 0x4) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x8c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7fff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44001}, 0x2000c805) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_deladdrlabel={0x78, 0x49, 0x100, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, r6, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0xe}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x44) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r6, @ANYBLOB="0000400000000082280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101002000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) 04:07:09 executing program 1: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 04:07:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) 04:07:09 executing program 5: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 04:07:09 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x10, 0x0, 0x1, [@typed={0x49, 0x0, 0x0, 0x0, @binary="d848c35b663c8cab9117bc29900ad3c02c91db039a97b5714b156e380a65af12ebeeb31177d40a6733284768899342fe1c22c567978a9f16f1c90582273450c6c52a619d5d"}]}]}, 0x64}}, 0x0) [ 419.799092][T22179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:07:09 executing program 1: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) [ 419.908199][T22180] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 04:07:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) 04:07:09 executing program 5: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 04:07:09 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x10, 0x0, 0x1, [@typed={0x49, 0x0, 0x0, 0x0, @binary="d848c35b663c8cab9117bc29900ad3c02c91db039a97b5714b156e380a65af12ebeeb31177d40a6733284768899342fe1c22c567978a9f16f1c90582273450c6c52a619d5d"}]}]}, 0x64}}, 0x0) 04:07:10 executing program 1: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 04:07:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x5c}}, 0x0) 04:07:10 executing program 1: clock_gettime(0x5, &(0x7f0000000000)) 04:07:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000042c0)={0x1, @inquiry={{0x401, 0x5}, {"1f6f2f"}}}, 0x9) 04:07:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x10, 0x0, 0x1, [@typed={0x49, 0x0, 0x0, 0x0, @binary="d848c35b663c8cab9117bc29900ad3c02c91db039a97b5714b156e380a65af12ebeeb31177d40a6733284768899342fe1c22c567978a9f16f1c90582273450c6c52a619d5d"}]}]}, 0x64}}, 0x0) 04:07:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x24}}, 0x0) 04:07:10 executing program 5: r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) 04:07:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0xdf0, 0x1ff, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffffc}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4800000000000000}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x55}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}]}, 0x70}, 0x1, 0x0, 0x0, 0x48011}, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) [ 420.665664][T15123] Bluetooth: hci5: command 0x041b tx timeout 04:07:10 executing program 1: clock_gettime(0x5, &(0x7f0000000000)) 04:07:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x10, 0x0, 0x1, [@typed={0x49, 0x0, 0x0, 0x0, @binary="d848c35b663c8cab9117bc29900ad3c02c91db039a97b5714b156e380a65af12ebeeb31177d40a6733284768899342fe1c22c567978a9f16f1c90582273450c6c52a619d5d"}]}]}, 0x64}}, 0x0) 04:07:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 04:07:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000042c0)={0x1, @inquiry={{0x401, 0x5}, {"1f6f2f"}}}, 0x9) 04:07:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x24}}, 0x0) 04:07:10 executing program 1: clock_gettime(0x5, &(0x7f0000000000)) 04:07:10 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0xdf0, 0x1ff, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffffc}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4800000000000000}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x55}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}]}, 0x70}, 0x1, 0x0, 0x0, 0x48011}, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 04:07:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0xdf0, 0x1ff, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffffc}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4800000000000000}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x55}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}]}, 0x70}, 0x1, 0x0, 0x0, 0x48011}, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 04:07:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000042c0)={0x1, @inquiry={{0x401, 0x5}, {"1f6f2f"}}}, 0x9) 04:07:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 04:07:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x24}}, 0x0) 04:07:11 executing program 1: clock_gettime(0x5, &(0x7f0000000000)) 04:07:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000042c0)={0x1, @inquiry={{0x401, 0x5}, {"1f6f2f"}}}, 0x9) 04:07:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 04:07:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x24}}, 0x0) 04:07:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000042c0)={0x1, @inquiry={{0x401, 0x5}, {"1f6f2f"}}}, 0x9) 04:07:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0xdf0, 0x1ff, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffffc}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4800000000000000}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x55}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}]}, 0x70}, 0x1, 0x0, 0x0, 0x48011}, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 04:07:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000240)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x2, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 04:07:11 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0xdf0, 0x1ff, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffffc}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4800000000000000}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x55}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}]}, 0x70}, 0x1, 0x0, 0x0, 0x48011}, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 04:07:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 04:07:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 04:07:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000042c0)={0x1, @inquiry={{0x401, 0x5}, {"1f6f2f"}}}, 0x9) 04:07:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000240)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x2, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 04:07:12 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000001e00000000000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='block_bio_remap\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 04:07:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 04:07:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000240)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x2, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 04:07:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, &(0x7f00000042c0)={0x1, @inquiry={{0x401, 0x5}, {"1f6f2f"}}}, 0x9) 04:07:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0xdf0, 0x1ff, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffffc}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4800000000000000}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x55}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}]}, 0x70}, 0x1, 0x0, 0x0, 0x48011}, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) [ 422.735780][T15123] Bluetooth: hci5: command 0x040f tx timeout 04:07:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x10000, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@ipv4={'\x00', '\xff\xff', @dev}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {0xdf0, 0x1ff, 0x7}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff, 0xfffffffc}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmmsg(r0, &(0x7f0000000180), 0x400000000000354, 0x2873dedf99c) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4800000000000000}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x55}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000}]}, 0x70}, 0x1, 0x0, 0x0, 0x48011}, 0x41) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) 04:07:12 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000001e00000000000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='block_bio_remap\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 04:07:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) [ 422.815825][T15123] Bluetooth: hci0: command 0x0401 tx timeout 04:07:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000240)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x2, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) 04:07:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) 04:07:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 04:07:13 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000001e00000000000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='block_bio_remap\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) 04:07:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) 04:07:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x0, 0x2}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000000000000001000000003c1005"]) 04:07:13 executing program 3: pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0500000020e6b76cd5cd0000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 04:07:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d3a49b}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfdbd8de}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3c7309e}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40ffaf42}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) 04:07:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16]}, 0x7a) 04:07:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) 04:07:13 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000001e00000000000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='block_bio_remap\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x400c00) [ 423.890397][T22354] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 423.917238][ T26] audit: type=1800 audit(1637899633.692:162): pid=22347 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=15575 res=0 errno=0 04:07:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16]}, 0x7a) [ 423.940511][T22354] netlink: 'syz-executor.3': attribute type 19 has an invalid length. 04:07:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x0, 0x2}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000000000000001000000003c1005"]) 04:07:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d3a49b}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfdbd8de}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3c7309e}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40ffaf42}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) 04:07:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) 04:07:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16]}, 0x7a) 04:07:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x0, 0x2}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000000000000001000000003c1005"]) 04:07:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d3a49b}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfdbd8de}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3c7309e}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40ffaf42}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) 04:07:14 executing program 3: pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0500000020e6b76cd5cd0000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 04:07:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}]}, 0x58}}, 0x0) 04:07:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES16]}, 0x7a) 04:07:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa0, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x31d3a49b}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfdbd8de}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3c7309e}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40ffaf42}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) 04:07:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x0, 0x2}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000000000000001000000003c1005"]) [ 424.825444][T15123] Bluetooth: hci5: command 0x0419 tx timeout 04:07:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}]}, 0x58}}, 0x0) 04:07:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x0, 0x2}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000000000000001000000003c1005"]) [ 424.895347][T15123] Bluetooth: hci0: command 0x0401 tx timeout 04:07:14 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 04:07:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) [ 424.999878][T22391] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 425.059117][T22391] netlink: 'syz-executor.3': attribute type 19 has an invalid length. 04:07:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}]}, 0x58}}, 0x0) 04:07:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x0, 0x2}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000000000000001000000003c1005"]) 04:07:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 04:07:15 executing program 3: pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0500000020e6b76cd5cd0000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 04:07:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 04:07:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}]}]}, 0x58}}, 0x0) 04:07:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 04:07:15 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000001c0)={0x0, r1, 0x0, 0x2}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000008c0)=ANY=[@ANYBLOB="00000000000000000001000000003c1005"]) 04:07:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 04:07:15 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005140)=[{{0xfffffffffffffffc, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003100)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x2, 0x0) 04:07:15 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0}, 0x20) 04:07:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 04:07:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) [ 426.106029][T22425] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 426.144474][T22425] netlink: 'syz-executor.3': attribute type 19 has an invalid length. 04:07:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}]}, 0x20}}, 0x0) 04:07:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 04:07:16 executing program 3: pipe(&(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff0500000020e6b76cd5cd0000", @ANYRES32=0x0, @ANYBLOB="0092000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 04:07:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 04:07:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:16 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005140)=[{{0xfffffffffffffffc, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003100)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x2, 0x0) 04:07:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x201}, 0x14}}, 0x0) 04:07:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}]}, 0x20}}, 0x0) [ 426.985158][T15123] Bluetooth: hci0: command 0x0401 tx timeout 04:07:16 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005140)=[{{0xfffffffffffffffc, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003100)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x2, 0x0) 04:07:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}]}, 0x20}}, 0x0) 04:07:16 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x201}, 0x14}}, 0x0) 04:07:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) [ 427.232294][T22465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 427.277723][T22465] netlink: 'syz-executor.3': attribute type 19 has an invalid length. 04:07:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x201}, 0x14}}, 0x0) 04:07:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:17 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2}]}, 0x20}}, 0x0) 04:07:17 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000005140)=[{{0xfffffffffffffffc, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003100)=[{0x408, 0x1, 0x1, "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"}], 0x408}}], 0x2, 0x0) 04:07:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:17 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x201}, 0x14}}, 0x0) 04:07:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:17 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x82) 04:07:17 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, 0x12, 0x521, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0d3f91a3"}]}, 0x54}}, 0x0) 04:07:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x82) 04:07:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:18 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:18 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, 0x12, 0x521, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0d3f91a3"}]}, 0x54}}, 0x0) 04:07:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x82) 04:07:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:18 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, 0x12, 0x521, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0d3f91a3"}]}, 0x54}}, 0x0) 04:07:18 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x54, 0x12, 0x521, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "0d3f91a3"}]}, 0x54}}, 0x0) 04:07:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x82) 04:07:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:18 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x800000071}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e0", 0x1}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000240)={0x0, &(0x7f0000000140)}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 04:07:18 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:18 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000600000014000300ff02000900000000000000070000000206000700263a0909140002"], 0x44}, 0x8, 0xf0}, 0x0) [ 429.065276][T15120] Bluetooth: hci0: command 0x0401 tx timeout 04:07:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x727, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 04:07:18 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) write(r3, &(0x7f0000000100)="b1", 0x19000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180), 0x4) accept4$nfc_llcp(r2, &(0x7f00000013c0), &(0x7f0000001440)=0x60, 0x80000) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000180), 0x4) getpid() r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) ioctl$TUNSETPERSIST(r5, 0x400454ca, 0x4af006) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0x1c) ioctl$TUNSETGROUP(r5, 0x400454ce, r7) sendmmsg$unix(r1, &(0x7f00000017c0)=[{{}, 0x6e}, {{}, 0x6e}], 0x2, 0xc841) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r8, 0x0, 0x10000, 0x0) write$binfmt_script(r3, 0x0, 0xb) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 04:07:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x727, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 04:07:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000600000014000300ff02000900000000000000070000000206000700263a0909140002"], 0x44}, 0x8, 0xf0}, 0x0) 04:07:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x70, &(0x7f0000000100), &(0x7f0000000140)=0x10) 04:07:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000500)={0xfffffffeffc, 0x1000000108}) 04:07:19 executing program 5: unshare(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000680)=""/225, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket(0x11, 0x800000003, 0x0) unshare(0x62000600) bind$bt_sco(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x4) unshare(0x100) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x705, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 04:07:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x727, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 04:07:19 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000600000014000300ff02000900000000000000070000000206000700263a0909140002"], 0x44}, 0x8, 0xf0}, 0x0) 04:07:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x800000071}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e0", 0x1}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000240)={0x0, &(0x7f0000000140)}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 04:07:19 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000500)={0xfffffffeffc, 0x1000000108}) 04:07:19 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x727, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x28}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 04:07:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000600000014000300ff02000900000000000000070000000206000700263a0909140002"], 0x44}, 0x8, 0xf0}, 0x0) 04:07:20 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000500)={0xfffffffeffc, 0x1000000108}) 04:07:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x800000071}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e0", 0x1}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000240)={0x0, &(0x7f0000000140)}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 04:07:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x800000071}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e0", 0x1}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000240)={0x0, &(0x7f0000000140)}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) [ 431.145028][T15120] Bluetooth: hci0: command 0x0401 tx timeout 04:07:21 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2123, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b0001006e6574656d000000400002000000000000000000000000000000000000000000000000001c00058018000100fdffffff3f363a7aa853ed39b4fd", @ANYRES16, @ANYBLOB], 0x70}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) write(r0, &(0x7f0000000240)="03b0f39ead3af941e9da004b88a8", 0xe) 04:07:21 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FITRIM(r0, 0xc020662a, &(0x7f0000000500)={0xfffffffeffc, 0x1000000108}) [ 431.454238][T22690] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 431.484459][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 431.514045][T22690] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 433.225232][T15113] Bluetooth: hci0: command 0x0401 tx timeout 04:07:23 executing program 5: unshare(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000680)=""/225, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket(0x11, 0x800000003, 0x0) unshare(0x62000600) bind$bt_sco(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x4) unshare(0x100) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x705, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 04:07:23 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x800000071}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e0", 0x1}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000240)={0x0, &(0x7f0000000140)}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 04:07:23 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/215, 0xd7}], 0x1, 0x0, 0x0) 04:07:23 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x800000071}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e0", 0x1}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000240)={0x0, &(0x7f0000000140)}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 04:07:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x800000071}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e0", 0x1}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000240)={0x0, &(0x7f0000000140)}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 04:07:23 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2123, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b0001006e6574656d000000400002000000000000000000000000000000000000000000000000001c00058018000100fdffffff3f363a7aa853ed39b4fd", @ANYRES16, @ANYBLOB], 0x70}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) write(r0, &(0x7f0000000240)="03b0f39ead3af941e9da004b88a8", 0xe) 04:07:23 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/215, 0xd7}], 0x1, 0x0, 0x0) [ 433.901721][T22724] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 434.010445][T22726] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:07:23 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2123, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b0001006e6574656d000000400002000000000000000000000000000000000000000000000000001c00058018000100fdffffff3f363a7aa853ed39b4fd", @ANYRES16, @ANYBLOB], 0x70}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) write(r0, &(0x7f0000000240)="03b0f39ead3af941e9da004b88a8", 0xe) 04:07:24 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/215, 0xd7}], 0x1, 0x0, 0x0) 04:07:24 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x800000071}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e0", 0x1}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000240)={0x0, &(0x7f0000000140)}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) 04:07:24 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x800000071}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e0", 0x1}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000240)={0x0, &(0x7f0000000140)}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) [ 434.451632][T22750] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:07:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x20}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x1040c) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x800000071}) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="e0", 0x1}], 0x1, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000240)={0x0, &(0x7f0000000140)}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2}) [ 434.543229][T22752] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:07:24 executing program 5: unshare(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000680)=""/225, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket(0x11, 0x800000003, 0x0) unshare(0x62000600) bind$bt_sco(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x4) unshare(0x100) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x705, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 04:07:24 executing program 0: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x2123, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b0001006e6574656d000000400002000000000000000000000000000000000000000000000000001c00058018000100fdffffff3f363a7aa853ed39b4fd", @ANYRES16, @ANYBLOB], 0x70}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) write(r0, &(0x7f0000000240)="03b0f39ead3af941e9da004b88a8", 0xe) 04:07:24 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) preadv(r0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/215, 0xd7}], 0x1, 0x0, 0x0) [ 435.225731][T22791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:07:25 executing program 4: unshare(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000680)=""/225, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket(0x11, 0x800000003, 0x0) unshare(0x62000600) bind$bt_sco(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x4) unshare(0x100) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x705, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 04:07:25 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000840)="1d", 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) [ 435.304934][T15120] Bluetooth: hci0: command 0x0401 tx timeout [ 435.326932][T22793] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 04:07:25 executing program 2: socket(0x11, 0x800000003, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba7860ac5cf65ac608ded8974895abaff4b4834ff930b3f1e0b02bd67aa03059bcecc7a9541aa3b77e758044ab4ea6f7ae55d88fecf908097503a6746bec66ba", 0x88012, 0x20c49a, 0x0, 0x27) 04:07:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x7, 0x4, 0x80, 0x3c3, 0x4}, 0x40) 04:07:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 04:07:25 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000840)="1d", 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 04:07:25 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x7, 0x4, 0x80, 0x3c3, 0x4}, 0x40) 04:07:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 04:07:25 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000840)="1d", 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 04:07:26 executing program 5: unshare(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000680)=""/225, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket(0x11, 0x800000003, 0x0) unshare(0x62000600) bind$bt_sco(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x4) unshare(0x100) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x705, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 04:07:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 04:07:26 executing program 3: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000840)="1d", 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) [ 437.384735][T15123] Bluetooth: hci0: command 0x0401 tx timeout 04:07:28 executing program 4: unshare(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000680)=""/225, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket(0x11, 0x800000003, 0x0) unshare(0x62000600) bind$bt_sco(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x4) unshare(0x100) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x705, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 04:07:28 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x7, 0x4, 0x80, 0x3c3, 0x4}, 0x40) 04:07:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 04:07:28 executing program 2: socket(0x11, 0x800000003, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba7860ac5cf65ac608ded8974895abaff4b4834ff930b3f1e0b02bd67aa03059bcecc7a9541aa3b77e758044ab4ea6f7ae55d88fecf908097503a6746bec66ba", 0x88012, 0x20c49a, 0x0, 0x27) 04:07:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 04:07:28 executing program 5: socket(0x11, 0x800000003, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba7860ac5cf65ac608ded8974895abaff4b4834ff930b3f1e0b02bd67aa03059bcecc7a9541aa3b77e758044ab4ea6f7ae55d88fecf908097503a6746bec66ba", 0x88012, 0x20c49a, 0x0, 0x27) 04:07:29 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x7, 0x4, 0x80, 0x3c3, 0x4}, 0x40) 04:07:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 04:07:29 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000840)="1d", 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) [ 439.617545][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.623888][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 04:07:29 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000840)="1d", 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) 04:07:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000150000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 04:07:29 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000840)="1d", 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) [ 439.958266][T22964] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:07:30 executing program 4: unshare(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x6, 0x1ff0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000680)=""/225, &(0x7f0000000080), &(0x7f0000000080), 0x1404, r0}, 0x38) r1 = socket(0x11, 0x800000003, 0x0) unshare(0x62000600) bind$bt_sco(0xffffffffffffffff, &(0x7f00000005c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x4) unshare(0x100) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x705, 0xa00, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 04:07:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 04:07:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000150000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 04:07:30 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x78) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006a00003219bd7000fedb685900002400001000000400090004000901041a0a05542584e609fa0da89648e9bcc47c945d51715052"], 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x8044) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f0000000780)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0x350}}], 0x1, 0x4040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4c, r2}) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0xe8d191e5f05d3ca5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x88}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x5c}}, 0x4c000) 04:07:30 executing program 5: socket(0x11, 0x800000003, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba7860ac5cf65ac608ded8974895abaff4b4834ff930b3f1e0b02bd67aa03059bcecc7a9541aa3b77e758044ab4ea6f7ae55d88fecf908097503a6746bec66ba", 0x88012, 0x20c49a, 0x0, 0x27) 04:07:30 executing program 2: socket(0x11, 0x800000003, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba7860ac5cf65ac608ded8974895abaff4b4834ff930b3f1e0b02bd67aa03059bcecc7a9541aa3b77e758044ab4ea6f7ae55d88fecf908097503a6746bec66ba", 0x88012, 0x20c49a, 0x0, 0x27) [ 440.477965][T22996] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:07:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000150000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 04:07:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) write(r0, &(0x7f00000000c0)="e3", 0x1) 04:07:30 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x78) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006a00003219bd7000fedb685900002400001000000400090004000901041a0a05542584e609fa0da89648e9bcc47c945d51715052"], 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x8044) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f0000000780)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0x350}}], 0x1, 0x4040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4c, r2}) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0xe8d191e5f05d3ca5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x88}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x5c}}, 0x4c000) [ 440.997235][T23021] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:07:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000150000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) 04:07:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) write(r0, &(0x7f00000000c0)="e3", 0x1) 04:07:31 executing program 2: socket(0x11, 0x800000003, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba7860ac5cf65ac608ded8974895abaff4b4834ff930b3f1e0b02bd67aa03059bcecc7a9541aa3b77e758044ab4ea6f7ae55d88fecf908097503a6746bec66ba", 0x88012, 0x20c49a, 0x0, 0x27) 04:07:31 executing program 5: socket(0x11, 0x800000003, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f00000012c0)="1a268a927f1f6588b967481241ba7860ac5cf65ac608ded8974895abaff4b4834ff930b3f1e0b02bd67aa03059bcecc7a9541aa3b77e758044ab4ea6f7ae55d88fecf908097503a6746bec66ba", 0x88012, 0x20c49a, 0x0, 0x27) [ 441.421356][T23051] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 04:07:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) write(r0, &(0x7f00000000c0)="e3", 0x1) 04:07:31 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x78) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006a00003219bd7000fedb685900002400001000000400090004000901041a0a05542584e609fa0da89648e9bcc47c945d51715052"], 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x8044) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f0000000780)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0x350}}], 0x1, 0x4040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4c, r2}) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0xe8d191e5f05d3ca5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x88}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x5c}}, 0x4c000) 04:07:31 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mtu(r0, 0x0, 0x22, 0x0, &(0x7f00000001c0)) 04:07:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) write(r0, &(0x7f00000000c0)="e3", 0x1) 04:07:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) write(r0, &(0x7f00000000c0)="e3", 0x1) 04:07:31 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mtu(r0, 0x0, 0x22, 0x0, &(0x7f00000001c0)) 04:07:31 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1a, 0x16, &(0x7f0000000500)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f00000004c0)={0x2}, 0x10}, 0x78) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006a00003219bd7000fedb685900002400001000000400090004000901041a0a05542584e609fa0da89648e9bcc47c945d51715052"], 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x8044) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_batadv\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) sendmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f0000000780)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001980)=ANY=[@ANYRESHEX], 0x350}}], 0x1, 0x4040000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8936, &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4c, r2}) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000200)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0xe8d191e5f05d3ca5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @loopback}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x88}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x5c}}, 0x4c000) 04:07:31 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) write(r0, &(0x7f00000000c0)="e3", 0x1) 04:07:32 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mtu(r0, 0x0, 0x22, 0x0, &(0x7f00000001c0)) 04:07:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) write(r0, &(0x7f00000000c0)="e3", 0x1) 04:07:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) 04:07:32 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mtu(r0, 0x0, 0x22, 0x0, &(0x7f00000001c0)) 04:07:32 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x1d, 0x0, 0x4) 04:07:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b2a00) sendfile(r1, r0, 0x0, 0x800000000000f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b2a00) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 04:07:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 04:07:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="06040600ad73d054067041e8f47827c4062d1d8d9e90fa66005d27749312a087bc06670043d93806ad53e75ad398fdd15871", 0x32, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 04:07:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r3, {0xffe0}}}, 0x24}}, 0x0) 04:07:32 executing program 0: syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) 04:07:32 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x1d, 0x0, 0x4) 04:07:32 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 04:07:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="06040600ad73d054067041e8f47827c4062d1d8d9e90fa66005d27749312a087bc06670043d93806ad53e75ad398fdd15871", 0x32, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 443.314167][T23111] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 04:07:33 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x1d, 0x0, 0x4) 04:07:33 executing program 4: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0x1d, 0x0, 0x4) [ 443.518749][T23111] device bond4 entered promiscuous mode [ 443.538782][T23111] 8021q: adding VLAN 0 to HW filter on device bond4 04:07:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) 04:07:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="06040600ad73d054067041e8f47827c4062d1d8d9e90fa66005d27749312a087bc06670043d93806ad53e75ad398fdd15871", 0x32, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 443.585196][T23116] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 04:07:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b2a00) sendfile(r1, r0, 0x0, 0x800000000000f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b2a00) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 04:07:33 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_gstrings={0x2, 0x0, 0x9, "378295d4f228e52e69"}}) 04:07:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r3, {0xffe0}}}, 0x24}}, 0x0) 04:07:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 04:07:33 executing program 0: syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}}}}}}, 0x0) 04:07:33 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="06040600ad73d054067041e8f47827c4062d1d8d9e90fa66005d27749312a087bc06670043d93806ad53e75ad398fdd15871", 0x32, 0x0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 444.078469][T23171] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 04:07:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) [ 444.237529][T23171] device bond5 entered promiscuous mode [ 444.288440][T23171] 8021q: adding VLAN 0 to HW filter on device bond5 04:07:34 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_gstrings={0x2, 0x0, 0x9, "378295d4f228e52e69"}}) 04:07:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b2a00) sendfile(r1, r0, 0x0, 0x800000000000f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b2a00) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 04:07:34 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) sendto$x25(0xffffffffffffffff, &(0x7f0000000140)="1c35bf5bf73897e3e2098b8d8b1513b1d7f7ec756496d628714e4f4d67af2442b130e015db009974441397c0a2647fedca4e35e0c3d828773d72f8b708f88bfe5f2f888f3a4183cef2b1abed54443281dea6a4eca62f00b1d7f70e6cc28e22da386c75c308", 0x65, 0x4000, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) 04:07:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r3, {0xffe0}}}, 0x24}}, 0x0) 04:07:34 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3, 0x2, [@TCA_GRED_PARMS={0x38}]}}]}, 0x6c}}, 0x0) [ 444.861522][ T26] audit: type=1804 audit(1637899654.632:163): pid=23226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/402/memory.events" dev="sda1" ino=15765 res=1 errno=0 [ 444.955744][T23229] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.006977][ T26] audit: type=1804 audit(1637899654.712:164): pid=23225 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/402/memory.events" dev="sda1" ino=15765 res=1 errno=0 [ 445.200085][T23229] device bond6 entered promiscuous mode [ 445.231387][T23229] 8021q: adding VLAN 0 to HW filter on device bond6 [ 445.265342][ T26] audit: type=1804 audit(1637899654.762:165): pid=23226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/402/memory.events" dev="sda1" ino=15765 res=1 errno=0 [ 445.304479][T23268] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 04:07:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b2a00) sendfile(r1, r0, 0x0, 0x800000000000f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b2a00) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 04:07:35 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_gstrings={0x2, 0x0, 0x9, "378295d4f228e52e69"}}) [ 445.342665][T23270] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 04:07:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newtfilter={0x24, 0x2a, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r3, {0xffe0}}}, 0x24}}, 0x0) 04:07:35 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3, 0x2, [@TCA_GRED_PARMS={0x38}]}}]}, 0x6c}}, 0x0) 04:07:35 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_gstrings={0x2, 0x0, 0x9, "378295d4f228e52e69"}}) [ 445.709062][ T26] audit: type=1800 audit(1637899655.482:166): pid=23226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=15765 res=0 errno=0 04:07:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b2a00) sendfile(r1, r0, 0x0, 0x800000000000f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b2a00) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) [ 445.831951][ T26] audit: type=1804 audit(1637899655.542:167): pid=23277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/402/memory.events" dev="sda1" ino=15765 res=1 errno=0 04:07:35 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) sendto$x25(0xffffffffffffffff, &(0x7f0000000140)="1c35bf5bf73897e3e2098b8d8b1513b1d7f7ec756496d628714e4f4d67af2442b130e015db009974441397c0a2647fedca4e35e0c3d828773d72f8b708f88bfe5f2f888f3a4183cef2b1abed54443281dea6a4eca62f00b1d7f70e6cc28e22da386c75c308", 0x65, 0x4000, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) [ 445.918617][T23284] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.975446][ T26] audit: type=1804 audit(1637899655.552:168): pid=23278 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/402/memory.events" dev="sda1" ino=15765 res=1 errno=0 [ 446.108859][T23284] device bond7 entered promiscuous mode [ 446.156739][T23284] 8021q: adding VLAN 0 to HW filter on device bond7 [ 446.209497][T23286] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 04:07:36 executing program 4: r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000009000000000014001a8008000300000000800800000002"], 0x34}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:07:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3, 0x2, [@TCA_GRED_PARMS={0x38}]}}]}, 0x6c}}, 0x0) [ 446.376698][ T26] audit: type=1804 audit(1637899656.152:169): pid=23328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/403/memory.events" dev="sda1" ino=15731 res=1 errno=0 04:07:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x2000067f}], 0x2}, 0x2) [ 446.592240][ T26] audit: type=1804 audit(1637899656.362:170): pid=23327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/403/memory.events" dev="sda1" ino=15731 res=1 errno=0 [ 446.688920][T23335] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.784157][ T26] audit: type=1804 audit(1637899656.452:171): pid=23328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/403/memory.events" dev="sda1" ino=15731 res=1 errno=0 04:07:36 executing program 4: r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000009000000000014001a8008000300000000800800000002"], 0x34}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:07:36 executing program 2: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3, 0x2, [@TCA_GRED_PARMS={0x38}]}}]}, 0x6c}}, 0x0) 04:07:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b2a00) sendfile(r1, r0, 0x0, 0x800000000000f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b2a00) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 04:07:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x2000067f}], 0x2}, 0x2) 04:07:37 executing program 4: r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000009000000000014001a8008000300000000800800000002"], 0x34}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 447.238340][T23347] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. 04:07:37 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) sendto$x25(0xffffffffffffffff, &(0x7f0000000140)="1c35bf5bf73897e3e2098b8d8b1513b1d7f7ec756496d628714e4f4d67af2442b130e015db009974441397c0a2647fedca4e35e0c3d828773d72f8b708f88bfe5f2f888f3a4183cef2b1abed54443281dea6a4eca62f00b1d7f70e6cc28e22da386c75c308", 0x65, 0x4000, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) 04:07:37 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) [ 447.649406][T23356] sctp: [Deprecated]: syz-executor.2 (pid 23356) Use of int in maxseg socket option. [ 447.649406][T23356] Use struct sctp_assoc_value instead 04:07:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b2a00) sendfile(r1, r0, 0x0, 0x800000000000f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b2a00) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) 04:07:37 executing program 4: r0 = socket(0x10, 0x8000000000000003, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000009000000000014001a8008000300000000800800000002"], 0x34}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000024a, 0x0) 04:07:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x2000067f}], 0x2}, 0x2) 04:07:37 executing program 4: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xc4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0xc4}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) [ 448.455254][T23356] sctp: [Deprecated]: syz-executor.2 (pid 23356) Use of int in maxseg socket option. [ 448.455254][T23356] Use struct sctp_assoc_value instead 04:07:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$rds(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/30, 0x1e}, {&(0x7f0000000600)=""/127, 0x2000067f}], 0x2}, 0x2) 04:07:38 executing program 4: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xc4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0xc4}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 04:07:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, {{0x8, 0x4}, {0x8}, [@IFLA_GTP_FD1={0x8, 0x2, r1}, @IFLA_GTP_FD0={0x8, 0x1, r1}]}}}}]}, 0x50}}, 0x0) 04:07:38 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000300), 0xfffffe8c) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) sendto$x25(0xffffffffffffffff, &(0x7f0000000140)="1c35bf5bf73897e3e2098b8d8b1513b1d7f7ec756496d628714e4f4d67af2442b130e015db009974441397c0a2647fedca4e35e0c3d828773d72f8b708f88bfe5f2f888f3a4183cef2b1abed54443281dea6a4eca62f00b1d7f70e6cc28e22da386c75c308", 0x65, 0x4000, 0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000000), 0xb1d000) 04:07:38 executing program 4: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xc4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0xc4}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 04:07:38 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000030c0)=""/4104, 0x1008}], 0x1}}], 0xe4, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="5e8b524068d2544c8da66f81aaeb98951135377ddf0f3159311c23d26812dbc94741823d727ce95d5bb9ee236283f5f4a5d2890421482b5dc771", 0x3a}, {&(0x7f0000001b00)="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", 0xcd7}], 0x2}}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000007b40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="441645fc7f92535e26c2605e1c5442f9cc64bb41a46ab899c8bcdf5f8dadfdb5c5a42f68369c3b5819574161c333cca2e768ab4abfadbde6915acf8be06077da7ff78a94ec126dabff0794c6e81663d7ed48f2bc64791d47fa747a93bd931da439704eb2892a07b04522e7cfccc7cd7587d35fb6237f736056858b1c1af1c6a3d718090604fbfe", 0x87}, {&(0x7f0000000100)="c23fd796060bcfce478520ef91309751bb2909f96b1129a4d113d91539cc02599e32def33f9f1b80da159b7bd9ca25915aa5b11baa7e7e6d409a45a70349d4ed212a9f3a4794dd97098378af3b257adc38f2c465ec1afd14d64b9986e51c4d37d1c7738643747c4e9b441f4b1e2e06c73d911b9208957069aa", 0x79}, {&(0x7f0000000400)="f5e84492bd16f9c6288aec5a73e84b9f22da5c9900427f7e7999b804ad8fed423a313c9d641f6fc049e1b33de1a1973864c5d897cff1b4879b0827624d5cc71f9e9fb85f52f1c5f2d486cb11d80a7a723f43288f431bb47d549261012eef1187ff355c8d59a252ce10c824e35f561c05d32bbd0185ec2337bd7ea627652b7f1da4d40dc94aa23182d628d59f70de5a46aa5361971bee6ff8ba916e863e59d281e84cab9f5a8e863dd1de", 0xaa}, {&(0x7f00000004c0)="6106de0655e8699b6215520425a632227bfaa26a09ff660137f6c731d83f2b4dca56af79b940520ab69c10b20294f676677abd32bff92ddc9d8057087d0a479c388abcf41406dd69fe69b65eaa3b14c2ca5d670d1906e8ef77f0ba5961eead820742475af66e014621d4d784036beb329bfbdf4f9250a22fc33874127aecbfbb8ae8adc0b5d576c99a0728292c07d71281eddb0f7a4a90a0ee4043f4dbf804d475383b6081e77046b9ffd679189d100d58", 0xb1}, {&(0x7f0000000680)="650689ee5f70f77621f71c43d359ca21c7f13bede74f5084d56c544b96f2575dec82ff63481ff0daa5e7527125d93d03362edd552b02a85c561f5f335cf1c8f2aa5bf55d0305d2cfa7da6142a2d3efc9e3c125331821a4e20b4f798d3a8c0d8f4c77cf386829e3c88bf806e845fa6e03c08e8a821b28bd6a09f0493252c654ca44330291e14da31b82d1db7b97570ceec910b557e696ec693122dc5b", 0x9c}], 0x5}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=[@iv={0x20, 0x117, 0x2, 0x5, "ec9ef4d359"}], 0x20}], 0x2, 0x0) 04:07:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, {{0x8, 0x4}, {0x8}, [@IFLA_GTP_FD1={0x8, 0x2, r1}, @IFLA_GTP_FD0={0x8, 0x1, r1}]}}}}]}, 0x50}}, 0x0) 04:07:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) 04:07:39 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4080, 0x1000}], 0x28, 0x0, 0x0, 0x40000}}], 0x400000000000221, 0x1be4, 0x0) 04:07:39 executing program 4: sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xc4, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @private2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0xc4}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) [ 449.514449][ T26] audit: type=1804 audit(1637899659.283:172): pid=23432 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/405/memory.events" dev="sda1" ino=15205 res=1 errno=0 04:07:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, {{0x8, 0x4}, {0x8}, [@IFLA_GTP_FD1={0x8, 0x2, r1}, @IFLA_GTP_FD0={0x8, 0x1, r1}]}}}}]}, 0x50}}, 0x0) 04:07:39 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000030c0)=""/4104, 0x1008}], 0x1}}], 0xe4, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="5e8b524068d2544c8da66f81aaeb98951135377ddf0f3159311c23d26812dbc94741823d727ce95d5bb9ee236283f5f4a5d2890421482b5dc771", 0x3a}, {&(0x7f0000001b00)="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", 0xcd7}], 0x2}}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000007b40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="441645fc7f92535e26c2605e1c5442f9cc64bb41a46ab899c8bcdf5f8dadfdb5c5a42f68369c3b5819574161c333cca2e768ab4abfadbde6915acf8be06077da7ff78a94ec126dabff0794c6e81663d7ed48f2bc64791d47fa747a93bd931da439704eb2892a07b04522e7cfccc7cd7587d35fb6237f736056858b1c1af1c6a3d718090604fbfe", 0x87}, {&(0x7f0000000100)="c23fd796060bcfce478520ef91309751bb2909f96b1129a4d113d91539cc02599e32def33f9f1b80da159b7bd9ca25915aa5b11baa7e7e6d409a45a70349d4ed212a9f3a4794dd97098378af3b257adc38f2c465ec1afd14d64b9986e51c4d37d1c7738643747c4e9b441f4b1e2e06c73d911b9208957069aa", 0x79}, {&(0x7f0000000400)="f5e84492bd16f9c6288aec5a73e84b9f22da5c9900427f7e7999b804ad8fed423a313c9d641f6fc049e1b33de1a1973864c5d897cff1b4879b0827624d5cc71f9e9fb85f52f1c5f2d486cb11d80a7a723f43288f431bb47d549261012eef1187ff355c8d59a252ce10c824e35f561c05d32bbd0185ec2337bd7ea627652b7f1da4d40dc94aa23182d628d59f70de5a46aa5361971bee6ff8ba916e863e59d281e84cab9f5a8e863dd1de", 0xaa}, {&(0x7f00000004c0)="6106de0655e8699b6215520425a632227bfaa26a09ff660137f6c731d83f2b4dca56af79b940520ab69c10b20294f676677abd32bff92ddc9d8057087d0a479c388abcf41406dd69fe69b65eaa3b14c2ca5d670d1906e8ef77f0ba5961eead820742475af66e014621d4d784036beb329bfbdf4f9250a22fc33874127aecbfbb8ae8adc0b5d576c99a0728292c07d71281eddb0f7a4a90a0ee4043f4dbf804d475383b6081e77046b9ffd679189d100d58", 0xb1}, {&(0x7f0000000680)="650689ee5f70f77621f71c43d359ca21c7f13bede74f5084d56c544b96f2575dec82ff63481ff0daa5e7527125d93d03362edd552b02a85c561f5f335cf1c8f2aa5bf55d0305d2cfa7da6142a2d3efc9e3c125331821a4e20b4f798d3a8c0d8f4c77cf386829e3c88bf806e845fa6e03c08e8a821b28bd6a09f0493252c654ca44330291e14da31b82d1db7b97570ceec910b557e696ec693122dc5b", 0x9c}], 0x5}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=[@iv={0x20, 0x117, 0x2, 0x5, "ec9ef4d359"}], 0x20}], 0x2, 0x0) [ 449.737946][T23445] sctp: [Deprecated]: syz-executor.2 (pid 23445) Use of int in maxseg socket option. [ 449.737946][T23445] Use struct sctp_assoc_value instead 04:07:39 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000030c0)=""/4104, 0x1008}], 0x1}}], 0xe4, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="5e8b524068d2544c8da66f81aaeb98951135377ddf0f3159311c23d26812dbc94741823d727ce95d5bb9ee236283f5f4a5d2890421482b5dc771", 0x3a}, {&(0x7f0000001b00)="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", 0xcd7}], 0x2}}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000007b40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="441645fc7f92535e26c2605e1c5442f9cc64bb41a46ab899c8bcdf5f8dadfdb5c5a42f68369c3b5819574161c333cca2e768ab4abfadbde6915acf8be06077da7ff78a94ec126dabff0794c6e81663d7ed48f2bc64791d47fa747a93bd931da439704eb2892a07b04522e7cfccc7cd7587d35fb6237f736056858b1c1af1c6a3d718090604fbfe", 0x87}, {&(0x7f0000000100)="c23fd796060bcfce478520ef91309751bb2909f96b1129a4d113d91539cc02599e32def33f9f1b80da159b7bd9ca25915aa5b11baa7e7e6d409a45a70349d4ed212a9f3a4794dd97098378af3b257adc38f2c465ec1afd14d64b9986e51c4d37d1c7738643747c4e9b441f4b1e2e06c73d911b9208957069aa", 0x79}, {&(0x7f0000000400)="f5e84492bd16f9c6288aec5a73e84b9f22da5c9900427f7e7999b804ad8fed423a313c9d641f6fc049e1b33de1a1973864c5d897cff1b4879b0827624d5cc71f9e9fb85f52f1c5f2d486cb11d80a7a723f43288f431bb47d549261012eef1187ff355c8d59a252ce10c824e35f561c05d32bbd0185ec2337bd7ea627652b7f1da4d40dc94aa23182d628d59f70de5a46aa5361971bee6ff8ba916e863e59d281e84cab9f5a8e863dd1de", 0xaa}, {&(0x7f00000004c0)="6106de0655e8699b6215520425a632227bfaa26a09ff660137f6c731d83f2b4dca56af79b940520ab69c10b20294f676677abd32bff92ddc9d8057087d0a479c388abcf41406dd69fe69b65eaa3b14c2ca5d670d1906e8ef77f0ba5961eead820742475af66e014621d4d784036beb329bfbdf4f9250a22fc33874127aecbfbb8ae8adc0b5d576c99a0728292c07d71281eddb0f7a4a90a0ee4043f4dbf804d475383b6081e77046b9ffd679189d100d58", 0xb1}, {&(0x7f0000000680)="650689ee5f70f77621f71c43d359ca21c7f13bede74f5084d56c544b96f2575dec82ff63481ff0daa5e7527125d93d03362edd552b02a85c561f5f335cf1c8f2aa5bf55d0305d2cfa7da6142a2d3efc9e3c125331821a4e20b4f798d3a8c0d8f4c77cf386829e3c88bf806e845fa6e03c08e8a821b28bd6a09f0493252c654ca44330291e14da31b82d1db7b97570ceec910b557e696ec693122dc5b", 0x9c}], 0x5}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=[@iv={0x20, 0x117, 0x2, 0x5, "ec9ef4d359"}], 0x20}], 0x2, 0x0) 04:07:39 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4080, 0x1000}], 0x28, 0x0, 0x0, 0x40000}}], 0x400000000000221, 0x1be4, 0x0) 04:07:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x24, 0x2, 0x0, 0x1, {{0x8, 0x4}, {0x8}, [@IFLA_GTP_FD1={0x8, 0x2, r1}, @IFLA_GTP_FD0={0x8, 0x1, r1}]}}}}]}, 0x50}}, 0x0) 04:07:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000030c0)=""/4104, 0x1008}], 0x1}}], 0xe4, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="5e8b524068d2544c8da66f81aaeb98951135377ddf0f3159311c23d26812dbc94741823d727ce95d5bb9ee236283f5f4a5d2890421482b5dc771", 0x3a}, {&(0x7f0000001b00)="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", 0xcd7}], 0x2}}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000007b40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="441645fc7f92535e26c2605e1c5442f9cc64bb41a46ab899c8bcdf5f8dadfdb5c5a42f68369c3b5819574161c333cca2e768ab4abfadbde6915acf8be06077da7ff78a94ec126dabff0794c6e81663d7ed48f2bc64791d47fa747a93bd931da439704eb2892a07b04522e7cfccc7cd7587d35fb6237f736056858b1c1af1c6a3d718090604fbfe", 0x87}, {&(0x7f0000000100)="c23fd796060bcfce478520ef91309751bb2909f96b1129a4d113d91539cc02599e32def33f9f1b80da159b7bd9ca25915aa5b11baa7e7e6d409a45a70349d4ed212a9f3a4794dd97098378af3b257adc38f2c465ec1afd14d64b9986e51c4d37d1c7738643747c4e9b441f4b1e2e06c73d911b9208957069aa", 0x79}, {&(0x7f0000000400)="f5e84492bd16f9c6288aec5a73e84b9f22da5c9900427f7e7999b804ad8fed423a313c9d641f6fc049e1b33de1a1973864c5d897cff1b4879b0827624d5cc71f9e9fb85f52f1c5f2d486cb11d80a7a723f43288f431bb47d549261012eef1187ff355c8d59a252ce10c824e35f561c05d32bbd0185ec2337bd7ea627652b7f1da4d40dc94aa23182d628d59f70de5a46aa5361971bee6ff8ba916e863e59d281e84cab9f5a8e863dd1de", 0xaa}, {&(0x7f00000004c0)="6106de0655e8699b6215520425a632227bfaa26a09ff660137f6c731d83f2b4dca56af79b940520ab69c10b20294f676677abd32bff92ddc9d8057087d0a479c388abcf41406dd69fe69b65eaa3b14c2ca5d670d1906e8ef77f0ba5961eead820742475af66e014621d4d784036beb329bfbdf4f9250a22fc33874127aecbfbb8ae8adc0b5d576c99a0728292c07d71281eddb0f7a4a90a0ee4043f4dbf804d475383b6081e77046b9ffd679189d100d58", 0xb1}, {&(0x7f0000000680)="650689ee5f70f77621f71c43d359ca21c7f13bede74f5084d56c544b96f2575dec82ff63481ff0daa5e7527125d93d03362edd552b02a85c561f5f335cf1c8f2aa5bf55d0305d2cfa7da6142a2d3efc9e3c125331821a4e20b4f798d3a8c0d8f4c77cf386829e3c88bf806e845fa6e03c08e8a821b28bd6a09f0493252c654ca44330291e14da31b82d1db7b97570ceec910b557e696ec693122dc5b", 0x9c}], 0x5}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=[@iv={0x20, 0x117, 0x2, 0x5, "ec9ef4d359"}], 0x20}], 0x2, 0x0) 04:07:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000030c0)=""/4104, 0x1008}], 0x1}}], 0xe4, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="5e8b524068d2544c8da66f81aaeb98951135377ddf0f3159311c23d26812dbc94741823d727ce95d5bb9ee236283f5f4a5d2890421482b5dc771", 0x3a}, {&(0x7f0000001b00)="07c08356076f697c0104b8515c4fa695973266d440e09c1eba391023ad7c4f3808729fdf56970f61b3a6d5f8df998d35d2ab7b1162ce0bdedcb72ddc555be17fdacdd77c8bdc2ccf924c225c628a21db4638ff81c520080b60037fcf6283663aa895a6badbca43d95b90f0012d008f9e07319edc3146bee57ee79afe115700cd55fa0e82694ece9f762391c6c27a6658c7e817f5e648c5814fdb083600484ae4eb6b7d693785bfe64f7b272e2f923b2355edb1818d6b34b8e765ca6157adffd798949a3e3c246116862bc118e0e2f3dd7f4587e666f28cad946ecf25c593c861438fcb6ea92dbbaf731d5967c23c9a9232c34a91ecb108895e79545d2be87915422ba181621301485fecbcdee01498fb3ae5b21ea3ab239b6f3fc3eeb48bfd2f13d9486d202ee99807102dc22c1b03ed1d98398f5f1be00235a2dc7b30c1d7c877169b67ec2a7748e697ac49d4f370937012570d6dd36a5e82099ed186c57bd0df3fc07680d769dd7d0125b6deaf11a6c91ebe79af73de71a849aae28e793d51899f55f286670ff9fdc74818057540d14295488d095d8785516977cc9f11ceb2e95ade71f66c221543034bd64ffd70ad47f82b62b6774a69e3dafaf58b020d275db47803c1f63e8805740b3ae20198976daacad1bb1b34936fb748e5ea48f5cea7c7860924d96f750aef27bd482717bd55e8615472ca75e70c3a8f973220fc1eafd63d5170d2712c7271ae0d3afc05563b420889558d24ca26aaa41bbbcd953f3589b8a1ababcae9626ce4e57b326b02b22e98747d2d8650bc5dfd43c41cdaf75da1ada7489a2e57d58a2f4b4a962767a5cb9e0faa5acacd7b0b7f9432bae87853f4685f7cd64f6c623b5afb202c5b1202461401561df623178e25d3322ee8191968fe1411bfd591187e41897b1cae0ffc04b1b7c09145ebb12ba39d74e7f51a9e1911d369362d1ad173c6da57c0ec15eae9dba492fe778218c3d3ad5ab6371942edb2072cf950a6fad3db27f51aa01459fc90aa4a80dbbc6f9f731d91e3cfee927b2c341f89bbaab7017d0a6051a1bdb7bebc6d52ea5abe5013262806920c0328d25299da32b1c5633469be296d43520b6058cbbda48a59923cd205ba39d49eebd58044aeb7a3abf6e7c384feafab1584bc701f9437585e573191a9794394af927d9c41a238dcf96e16c4bf805eaf0dbba832995951248cd02ae85a34c3ac6a93464c0123aba32aba38ea60a9cbb5235d06130b0aa072beab25290f871d5c6fec4bb3342f40b5fd34445052ef361c05b252f85d30f1c10b34f4f9724b53e42526976b9de137da2b835e747891e57a662cf6277ea6d394b02370444c9fd291cb54ab5f5c7cfbdcf5843e79b25d6b5c01380067627a0a6bf9f0a4b66aa1326b29b4aeee16115a79d983b7b87993d1b41183da083692a70f0c142ecd1d1b2e038a189630b3d975ff9dc19be97526773f53fb54340810259b94a05d29f4c13795a106846419c1fb2d8fcd9e77b50752d14148b6a63b60e24a13633ecdadccf47d53dc0bc694f803ac634d7fefd9d09100e998f3d20f0c171fe934fdaef7e07c7d5fe4f8f9a26bcb7e96fe7e3722563a1ae7ac9cd0a28f4876c9d55e53a62d3f0beaac15a7beb6d58ad52b8f0ba541f2200e9d84c03162b691715a3188146fc92e79a75ffa41f85e4897956340430873bb89f1c5a715f7ab05553702f2a732795dcd5a9555a455f63ff6eb7e6c6579fbe4941168acb679721ff383a911abe04584766a361578214f9c8377312e32864f42672d6565aea757462b0427552d6088ec522b94ae726cbfc1e180da0924de0743ee74f43ac2b251f818619549432c5e918241ae5b610261cb96687b851e0e624bee9d962fae999db79c2f41bc0998d64064bc75eac6c51b8d0114e0492dff6eb135129979187e52c1fd7774a8f56cdd9429bceb8cad41bddd821e9dbcd76523cf88bf3cc3b647f62411d3d084f15c2ad905bd2ce17f5933f36cb198e25155d95490a71c353bf60f33e106bc3984e8d5a2b28c39c562693fafff881ff108731ed7e921d9f854931ceb19c17dbe7507b5dd4fd03ec6cbc19ad6bf8d22629b73e89cbad36ea16044c8b4eb1b158df382d56ad1dfc59ddcf62f6f5338d3fb01e2fc4b36c86294456ae25ad17770a479866a7568fe990346e68183c989799fe612daee1949521355450070e551c527a8f76fd3989ad350b6be8e467c56da47a6ae885fc982a811d56c6d5abb3a1ee526517a8c009c8cad400913763b54e8ba50db4ce8c43ec5ac7c6ed527a130e1fd655b02f8c9cb434c528d7ef0839860e9ce6dac31907df1f49dd2dd517ee047917e0efac4d50d245585b17486f2b04b868c442e6c21bc64684161a34656ab7e46af45d32d319b6db12d3ea2738161f6960a15e8bf3aa65f49d27a8829e4fd3617d185f07dbbe21b7c641f11b3e997f9a014af219c89eba1e055133763ab1de1c890da7ed349d07b2c5836ce9edf7b26bacfe5a3e307559ff6ff9287a1ca85c0e76aca1076f296c3a48ca4b379f035b8b4aced41f4662da6affbf2ebd7bacb7b20d25f6fa849ae9ef6694b85f75b63bd2aa0a4dc03e500468aca28dd82c926688627ec33fec9009820332509f1d1ed69516b7693e1b965023b55984f3e7b62a9151bd8c79f1358ed37183c30b6a77c3906db6c9ff16dbd0605ffa386965118e2a4152cfe2e723fd852f6fe9e73baf96566a0e05ae8626c3cd3ef226911b5336c541e6285922897a62a2d5cefa55a37f4ab451df7083fcb14862f80009febf509eb02e7aa117c26330c8b8f580b4781ba0d7cf554793df7a6d1c45a442387ba1cebfd3f89275ab6cd20398807a31543ff321e6a2f0e7a6606b6236769b0a49cb4aba2a5885570411b01603f418729ea76c85a89a1f998cc8e1737a98fcc3b6ef32dbc61ca91c5a5f4717095c9ab64dd2d1794bbfc2a7cb74fff3b3200711270f1b1ad750eade3ab9e2380f99830ba9c22696824386ac72b94de8a157fda694292e3d7d6ecfce053694921d71b18c7f4028f28f5c7e0e8666c427d19ac15086da3e2fd4b40378b400ebcc38dea02ed2c6088539e8bc7b11a50adbf64585aaed9df8bb81a6c5b84ee197ddc0399a4669eeebc2f6b4b49d1ee432399028491d63c3559074716c1d482186714ad7184384bdfd758af183b8f6d1ad0de68e1d6eb8e13381c76b92986624c2b8339e036d3d240a8302babaae3be1e0f81ddcf5e4f9389af78f19760aae81734f5c5dbeb119a32bec18b64c3fccf8aed7be96826845f01484e4b075cdcb349f337495c7864350f08dddefe537d66854a84a8f974c845a5bdf2138e46fbf7e4a7350ad0dfec392bc0965059150282a29eb5089b63b57a848d34789b2b008bcf20823d8f701021f73ed018cb53298603643b0daed5e34315d5ef979e118f875cd58d03100879c6974386d94f2638d1cbd9e5a10fb32956b28875869d54c7493b84d2c8552a48172a4a024bfc26c086296e152b41140710b40995f70b5ea2be255c60c9b92c0d104311c6a738837fda88170b9a44c39d1af0f50457dd8b7a67c011ce7cdc9bcf51f5b419775f1c96c3353c4dec4b966a3f275e0bb6bdd4428ae84c6c71832996433ececc6ffad72cbf6e47b4f664c6e11b8635a66b9de1e92fdb157dd3f4afa73f6d7e3da2c4455382850e4d7b6ce33280210c476606580a4a86bed38c4c0eb7c878c327212209ac01ae070f9fba757ca1e4ce651fa6c9571e8402ddf78fc44e2c43df17d67234f88ea207c9110acbde034fb3a09aaa90f81df874f905b813b2105aaa90ecc21ac9df8798078d7423796a7744b8958732d1d7f44bd37ed2ca504bbf1badadf065805b28c59952a3be6cdafa0121ee48dc792acf4b46304309080aa0dcff5dd7f4c40e00a3750ddfc199b0f2405d07dfc3c48d974ca5f59d31effea343948f1e8fa5cb157f7527d78b75aeddadce85d2e30aaf40123fe691b13558fc56ca56ff8fc286ad824ff0025966cb9d4616e231ce59442682f4267b9d12c0f2dfe5bfa72c4e03ffba7e5ea9e03ebb788af4f7cc4ba7a0ad09472eb23fb672295138f311ea172859089ca2ea9ba24177f0b5bf82ccf1c335a4cdeb8acc0faf5fa65acae2a298e10b00eb461d14235074912a1e334fe84181da50268a6e01ed0c2c929fee27f77d677c1cf379815958ce4cbd1f32bd12ae87bca2d86d605ca42a0e9511aa89b57375aa536ee28845d4d8f49449d8f0f0507caa0329c2b4e06419ca1aec4171637d8e0b59f406274c1edf90749d6e677b21e48ea68615588731f4791aac2d17958f677cedb4a8c687a18618c931e4e6d8e04fe748cb521fa29ff9dff9cbac936a341e553d81fb98c2e962914dd5b5a24de8e20d4b081d0f6aa9dd63ed4f66b0a8e25b311c38e918b702b6f736c24a22940e15ce375bfa7931336f91015313620eddddfbf692c41c7fddd13508f5c854740074c5791fcc80dee00f4460af96ae8c5f0aea9a32b26ce796e50612f8abcbd173f788d4e0f5c55391ceb134ee6487d16e50cf56bd09bcee22f9549398f8f8717e3c3a0968023149d21cf66ddf28dfbfc0b6975b5d4de9014173902d3bdb02a73a7553a1e33230b488b3efca077dd07f935745bb0ef5a1", 0xcd7}], 0x2}}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000007b40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="441645fc7f92535e26c2605e1c5442f9cc64bb41a46ab899c8bcdf5f8dadfdb5c5a42f68369c3b5819574161c333cca2e768ab4abfadbde6915acf8be06077da7ff78a94ec126dabff0794c6e81663d7ed48f2bc64791d47fa747a93bd931da439704eb2892a07b04522e7cfccc7cd7587d35fb6237f736056858b1c1af1c6a3d718090604fbfe", 0x87}, {&(0x7f0000000100)="c23fd796060bcfce478520ef91309751bb2909f96b1129a4d113d91539cc02599e32def33f9f1b80da159b7bd9ca25915aa5b11baa7e7e6d409a45a70349d4ed212a9f3a4794dd97098378af3b257adc38f2c465ec1afd14d64b9986e51c4d37d1c7738643747c4e9b441f4b1e2e06c73d911b9208957069aa", 0x79}, {&(0x7f0000000400)="f5e84492bd16f9c6288aec5a73e84b9f22da5c9900427f7e7999b804ad8fed423a313c9d641f6fc049e1b33de1a1973864c5d897cff1b4879b0827624d5cc71f9e9fb85f52f1c5f2d486cb11d80a7a723f43288f431bb47d549261012eef1187ff355c8d59a252ce10c824e35f561c05d32bbd0185ec2337bd7ea627652b7f1da4d40dc94aa23182d628d59f70de5a46aa5361971bee6ff8ba916e863e59d281e84cab9f5a8e863dd1de", 0xaa}, {&(0x7f00000004c0)="6106de0655e8699b6215520425a632227bfaa26a09ff660137f6c731d83f2b4dca56af79b940520ab69c10b20294f676677abd32bff92ddc9d8057087d0a479c388abcf41406dd69fe69b65eaa3b14c2ca5d670d1906e8ef77f0ba5961eead820742475af66e014621d4d784036beb329bfbdf4f9250a22fc33874127aecbfbb8ae8adc0b5d576c99a0728292c07d71281eddb0f7a4a90a0ee4043f4dbf804d475383b6081e77046b9ffd679189d100d58", 0xb1}, {&(0x7f0000000680)="650689ee5f70f77621f71c43d359ca21c7f13bede74f5084d56c544b96f2575dec82ff63481ff0daa5e7527125d93d03362edd552b02a85c561f5f335cf1c8f2aa5bf55d0305d2cfa7da6142a2d3efc9e3c125331821a4e20b4f798d3a8c0d8f4c77cf386829e3c88bf806e845fa6e03c08e8a821b28bd6a09f0493252c654ca44330291e14da31b82d1db7b97570ceec910b557e696ec693122dc5b", 0x9c}], 0x5}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=[@iv={0x20, 0x117, 0x2, 0x5, "ec9ef4d359"}], 0x20}], 0x2, 0x0) 04:07:40 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4080, 0x1000}], 0x28, 0x0, 0x0, 0x40000}}], 0x400000000000221, 0x1be4, 0x0) 04:07:40 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4080, 0x1000}], 0x28, 0x0, 0x0, 0x40000}}], 0x400000000000221, 0x1be4, 0x0) 04:07:40 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) 04:07:40 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) 04:07:40 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000030c0)=""/4104, 0x1008}], 0x1}}], 0xe4, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="5e8b524068d2544c8da66f81aaeb98951135377ddf0f3159311c23d26812dbc94741823d727ce95d5bb9ee236283f5f4a5d2890421482b5dc771", 0x3a}, {&(0x7f0000001b00)="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", 0xcd7}], 0x2}}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000007b40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="441645fc7f92535e26c2605e1c5442f9cc64bb41a46ab899c8bcdf5f8dadfdb5c5a42f68369c3b5819574161c333cca2e768ab4abfadbde6915acf8be06077da7ff78a94ec126dabff0794c6e81663d7ed48f2bc64791d47fa747a93bd931da439704eb2892a07b04522e7cfccc7cd7587d35fb6237f736056858b1c1af1c6a3d718090604fbfe", 0x87}, {&(0x7f0000000100)="c23fd796060bcfce478520ef91309751bb2909f96b1129a4d113d91539cc02599e32def33f9f1b80da159b7bd9ca25915aa5b11baa7e7e6d409a45a70349d4ed212a9f3a4794dd97098378af3b257adc38f2c465ec1afd14d64b9986e51c4d37d1c7738643747c4e9b441f4b1e2e06c73d911b9208957069aa", 0x79}, {&(0x7f0000000400)="f5e84492bd16f9c6288aec5a73e84b9f22da5c9900427f7e7999b804ad8fed423a313c9d641f6fc049e1b33de1a1973864c5d897cff1b4879b0827624d5cc71f9e9fb85f52f1c5f2d486cb11d80a7a723f43288f431bb47d549261012eef1187ff355c8d59a252ce10c824e35f561c05d32bbd0185ec2337bd7ea627652b7f1da4d40dc94aa23182d628d59f70de5a46aa5361971bee6ff8ba916e863e59d281e84cab9f5a8e863dd1de", 0xaa}, {&(0x7f00000004c0)="6106de0655e8699b6215520425a632227bfaa26a09ff660137f6c731d83f2b4dca56af79b940520ab69c10b20294f676677abd32bff92ddc9d8057087d0a479c388abcf41406dd69fe69b65eaa3b14c2ca5d670d1906e8ef77f0ba5961eead820742475af66e014621d4d784036beb329bfbdf4f9250a22fc33874127aecbfbb8ae8adc0b5d576c99a0728292c07d71281eddb0f7a4a90a0ee4043f4dbf804d475383b6081e77046b9ffd679189d100d58", 0xb1}, {&(0x7f0000000680)="650689ee5f70f77621f71c43d359ca21c7f13bede74f5084d56c544b96f2575dec82ff63481ff0daa5e7527125d93d03362edd552b02a85c561f5f335cf1c8f2aa5bf55d0305d2cfa7da6142a2d3efc9e3c125331821a4e20b4f798d3a8c0d8f4c77cf386829e3c88bf806e845fa6e03c08e8a821b28bd6a09f0493252c654ca44330291e14da31b82d1db7b97570ceec910b557e696ec693122dc5b", 0x9c}], 0x5}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=[@iv={0x20, 0x117, 0x2, 0x5, "ec9ef4d359"}], 0x20}], 0x2, 0x0) 04:07:40 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4080, 0x1000}], 0x28, 0x0, 0x0, 0x40000}}], 0x400000000000221, 0x1be4, 0x0) 04:07:40 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000030c0)=""/4104, 0x1008}], 0x1}}], 0xe4, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="5e8b524068d2544c8da66f81aaeb98951135377ddf0f3159311c23d26812dbc94741823d727ce95d5bb9ee236283f5f4a5d2890421482b5dc771", 0x3a}, {&(0x7f0000001b00)="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", 0xcd7}], 0x2}}], 0x1, 0x0) sendmmsg$alg(r1, &(0x7f0000007b40)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="441645fc7f92535e26c2605e1c5442f9cc64bb41a46ab899c8bcdf5f8dadfdb5c5a42f68369c3b5819574161c333cca2e768ab4abfadbde6915acf8be06077da7ff78a94ec126dabff0794c6e81663d7ed48f2bc64791d47fa747a93bd931da439704eb2892a07b04522e7cfccc7cd7587d35fb6237f736056858b1c1af1c6a3d718090604fbfe", 0x87}, {&(0x7f0000000100)="c23fd796060bcfce478520ef91309751bb2909f96b1129a4d113d91539cc02599e32def33f9f1b80da159b7bd9ca25915aa5b11baa7e7e6d409a45a70349d4ed212a9f3a4794dd97098378af3b257adc38f2c465ec1afd14d64b9986e51c4d37d1c7738643747c4e9b441f4b1e2e06c73d911b9208957069aa", 0x79}, {&(0x7f0000000400)="f5e84492bd16f9c6288aec5a73e84b9f22da5c9900427f7e7999b804ad8fed423a313c9d641f6fc049e1b33de1a1973864c5d897cff1b4879b0827624d5cc71f9e9fb85f52f1c5f2d486cb11d80a7a723f43288f431bb47d549261012eef1187ff355c8d59a252ce10c824e35f561c05d32bbd0185ec2337bd7ea627652b7f1da4d40dc94aa23182d628d59f70de5a46aa5361971bee6ff8ba916e863e59d281e84cab9f5a8e863dd1de", 0xaa}, {&(0x7f00000004c0)="6106de0655e8699b6215520425a632227bfaa26a09ff660137f6c731d83f2b4dca56af79b940520ab69c10b20294f676677abd32bff92ddc9d8057087d0a479c388abcf41406dd69fe69b65eaa3b14c2ca5d670d1906e8ef77f0ba5961eead820742475af66e014621d4d784036beb329bfbdf4f9250a22fc33874127aecbfbb8ae8adc0b5d576c99a0728292c07d71281eddb0f7a4a90a0ee4043f4dbf804d475383b6081e77046b9ffd679189d100d58", 0xb1}, {&(0x7f0000000680)="650689ee5f70f77621f71c43d359ca21c7f13bede74f5084d56c544b96f2575dec82ff63481ff0daa5e7527125d93d03362edd552b02a85c561f5f335cf1c8f2aa5bf55d0305d2cfa7da6142a2d3efc9e3c125331821a4e20b4f798d3a8c0d8f4c77cf386829e3c88bf806e845fa6e03c08e8a821b28bd6a09f0493252c654ca44330291e14da31b82d1db7b97570ceec910b557e696ec693122dc5b", 0x9c}], 0x5}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000005740)=[@iv={0x20, 0x117, 0x2, 0x5, "ec9ef4d359"}], 0x20}], 0x2, 0x0) [ 450.906932][T23496] sctp: [Deprecated]: syz-executor.2 (pid 23496) Use of int in maxseg socket option. [ 450.906932][T23496] Use struct sctp_assoc_value instead 04:07:40 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4080, 0x1000}], 0x28, 0x0, 0x0, 0x40000}}], 0x400000000000221, 0x1be4, 0x0) [ 451.057070][T23502] sctp: [Deprecated]: syz-executor.3 (pid 23502) Use of int in maxseg socket option. [ 451.057070][T23502] Use struct sctp_assoc_value instead 04:07:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) 04:07:41 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) 04:07:41 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x0) 04:07:41 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4080, 0x1000}], 0x28, 0x0, 0x0, 0x40000}}], 0x400000000000221, 0x1be4, 0x0) [ 451.479375][T23520] sctp: [Deprecated]: syz-executor.4 (pid 23520) Use of int in maxseg socket option. [ 451.479375][T23520] Use struct sctp_assoc_value instead [ 451.562697][T23522] sctp: [Deprecated]: syz-executor.1 (pid 23522) Use of int in maxseg socket option. [ 451.562697][T23522] Use struct sctp_assoc_value instead 04:07:41 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x0) 04:07:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) 04:07:41 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000015c0)=""/146, 0x92}], 0x1, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000004000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 452.123402][T23565] sctp: [Deprecated]: syz-executor.2 (pid 23565) Use of int in maxseg socket option. [ 452.123402][T23565] Use struct sctp_assoc_value instead 04:07:42 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) 04:07:42 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x0) 04:07:42 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x30}}, 0x0) 04:07:42 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000015c0)=""/146, 0x92}], 0x1, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000004000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 452.614759][T23602] sctp: [Deprecated]: syz-executor.3 (pid 23602) Use of int in maxseg socket option. [ 452.614759][T23602] Use struct sctp_assoc_value instead 04:07:42 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) 04:07:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000015c0)=""/146, 0x92}], 0x1, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000004000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 452.986046][T23624] sctp: [Deprecated]: syz-executor.4 (pid 23624) Use of int in maxseg socket option. [ 452.986046][T23624] Use struct sctp_assoc_value instead 04:07:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) 04:07:45 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000015c0)=""/146, 0x92}], 0x1, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000004000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:07:45 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000015c0)=""/146, 0x92}], 0x1, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000004000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:07:45 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) [ 456.303567][T23699] sctp: [Deprecated]: syz-executor.3 (pid 23699) Use of int in maxseg socket option. [ 456.303567][T23699] Use struct sctp_assoc_value instead [ 456.351567][T23701] sctp: [Deprecated]: syz-executor.1 (pid 23701) Use of int in maxseg socket option. [ 456.351567][T23701] Use struct sctp_assoc_value instead 04:07:46 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4a0bdded13469066e1f206ce6ab1be1e7b466c5a2b585e704a9d81c7fd937dd49fa48bad3256d6d97fb41bdfc8ecc43fb59d14aa858bdf1c24afbd84086d5d", 0x12}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75a8000000000000000019160800008f74fa00040000000000004797608dd0e7316d1d4f4dbaa0a67be4714b7ccefa8a00"}, 0x60) 04:07:46 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) 04:07:46 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000015c0)=""/146, 0x92}], 0x1, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000004000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:07:46 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000001600)=ANY=[], 0x23fa00) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000015c0)=""/146, 0x92}], 0x1, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xdd3d) sendfile(r0, r1, 0x0, 0x10000000004000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 456.929095][T23726] sctp: [Deprecated]: syz-executor.4 (pid 23726) Use of int in maxseg socket option. [ 456.929095][T23726] Use struct sctp_assoc_value instead 04:07:46 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4a0bdded13469066e1f206ce6ab1be1e7b466c5a2b585e704a9d81c7fd937dd49fa48bad3256d6d97fb41bdfc8ecc43fb59d14aa858bdf1c24afbd84086d5d", 0x12}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75a8000000000000000019160800008f74fa00040000000000004797608dd0e7316d1d4f4dbaa0a67be4714b7ccefa8a00"}, 0x60) 04:07:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)) 04:07:47 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1c6, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0), 0xc) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009440)=[{{0x0, 0xfffffffffffffdb5, &(0x7f0000000180)=[{&(0x7f0000000100)="99", 0x1}], 0x1}}], 0x1, 0x20004010) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000500)={0x0, 0x3}, 0x20000508) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) unshare(0x6c060000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x1}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2, 0x0, 0x6}, 0x20) 04:07:47 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4a0bdded13469066e1f206ce6ab1be1e7b466c5a2b585e704a9d81c7fd937dd49fa48bad3256d6d97fb41bdfc8ecc43fb59d14aa858bdf1c24afbd84086d5d", 0x12}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75a8000000000000000019160800008f74fa00040000000000004797608dd0e7316d1d4f4dbaa0a67be4714b7ccefa8a00"}, 0x60) 04:07:47 executing program 5: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/139, 0x8b}], 0x6}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002c00020028000b8008000100010000001c00028018000100000004"], 0x5c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 04:07:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)) [ 457.798531][T23780] sctp: [Deprecated]: syz-executor.1 (pid 23780) Use of int in maxseg socket option. [ 457.798531][T23780] Use struct sctp_assoc_value instead 04:07:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)) [ 457.976531][T23798] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:07:47 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "4a0bdded13469066e1f206ce6ab1be1e7b466c5a2b585e704a9d81c7fd937dd49fa48bad3256d6d97fb41bdfc8ecc43fb59d14aa858bdf1c24afbd84086d5d", 0x12}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "75a8000000000000000019160800008f74fa00040000000000004797608dd0e7316d1d4f4dbaa0a67be4714b7ccefa8a00"}, 0x60) 04:07:47 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x20000000) [ 458.118671][T23802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 458.170877][T23798] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:07:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)) 04:07:48 executing program 5: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/139, 0x8b}], 0x6}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002c00020028000b8008000100010000001c00028018000100000004"], 0x5c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 04:07:48 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/139, 0x8b}], 0x6}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002c00020028000b8008000100010000001c00028018000100000004"], 0x5c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 04:07:48 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x20000000) 04:07:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)) [ 458.584298][T23831] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 458.744807][T23833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 458.760316][T23838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 458.855491][T23852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:07:48 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/139, 0x8b}], 0x6}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002c00020028000b8008000100010000001c00028018000100000004"], 0x5c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 04:07:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)) 04:07:48 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x20000000) 04:07:48 executing program 5: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/139, 0x8b}], 0x6}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002c00020028000b8008000100010000001c00028018000100000004"], 0x5c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 04:07:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='io.stat\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='f', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x4, 0x0, &(0x7f0000000000)) 04:07:48 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r0, 0x0, 0x0, 0x21, 0x0, 0x0) [ 459.197901][T23889] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:07:49 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x20000000) [ 459.321420][T23892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:07:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r0, 0x0, 0x0, 0x21, 0x0, 0x0) 04:07:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) [ 459.445161][T23894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 04:07:49 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "bb117644bbeaad4f"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "7935206c2bb0b53d"}}, 0x38}}, 0x0) 04:07:49 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/139, 0x8b}], 0x6}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002c00020028000b8008000100010000001c00028018000100000004"], 0x5c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 04:07:49 executing program 5: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000400)=""/139, 0x8b}], 0x6}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\\\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00000000000000000800000009000100666c6f77000000002c00020028000b8008000100010000001c00028018000100000004"], 0x5c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 04:07:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r0, 0x0, 0x0, 0x21, 0x0, 0x0) 04:07:49 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000001500)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=[@tclass={{0x14, 0x29, 0x36}}], 0x18}}], 0x2, 0x0) 04:07:49 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "bb117644bbeaad4f"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "7935206c2bb0b53d"}}, 0x38}}, 0x0) 04:07:49 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:07:49 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvfrom(r0, 0x0, 0x0, 0x21, 0x0, 0x0) 04:07:49 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000001500)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=[@tclass={{0x14, 0x29, 0x36}}], 0x18}}], 0x2, 0x0) 04:07:50 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "bb117644bbeaad4f"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "7935206c2bb0b53d"}}, 0x38}}, 0x0) 04:07:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x104000000000000, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0xe8, 0xe8, 0xe8, 0xe8, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@cgroup0={{0x28}, {0x0, 0x41}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c1) 04:07:50 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:07:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x400454ca, &(0x7f00000000c0)={0xfa2e, @nfc={0x27, 0x0, 0x2}, @xdp, @phonet}) ioctl$TUNSETGROUP(r0, 0x800454e1, 0x0) 04:07:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000001500)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=[@tclass={{0x14, 0x29, 0x36}}], 0x18}}], 0x2, 0x0) 04:07:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x104000000000000, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0xe8, 0xe8, 0xe8, 0xe8, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@cgroup0={{0x28}, {0x0, 0x41}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c1) 04:07:50 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:07:50 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "bb117644bbeaad4f"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "7935206c2bb0b53d"}}, 0x38}}, 0x0) 04:07:50 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:07:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x104000000000000, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0xe8, 0xe8, 0xe8, 0xe8, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@cgroup0={{0x28}, {0x0, 0x41}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c1) 04:07:50 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000001500)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001700)=[@tclass={{0x14, 0x29, 0x36}}], 0x18}}], 0x2, 0x0) 04:07:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x400454ca, &(0x7f00000000c0)={0xfa2e, @nfc={0x27, 0x0, 0x2}, @xdp, @phonet}) ioctl$TUNSETGROUP(r0, 0x800454e1, 0x0) 04:07:50 executing program 0: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6800000000c259006c0000000000040072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r3) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 04:07:50 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:07:51 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:07:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x104000000000000, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x2, 0x3, 0x220, 0x0, 0xe8, 0xe8, 0xe8, 0xe8, 0x188, 0x188, 0x188, 0x188, 0x188, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@cgroup0={{0x28}, {0x0, 0x41}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c1) 04:07:51 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000400)=ANY=[], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 04:07:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x400454ca, &(0x7f00000000c0)={0xfa2e, @nfc={0x27, 0x0, 0x2}, @xdp, @phonet}) ioctl$TUNSETGROUP(r0, 0x800454e1, 0x0) 04:07:51 executing program 0: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6800000000c259006c0000000000040072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r3) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 04:07:51 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0xb960}, 0x10) write(r0, &(0x7f0000000380)="240000005a001f0014f9f407000904000a00fb75100002806e07580c12a300feffffff08", 0x24) 04:07:51 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000100)="cd6d610000", 0x5) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x3e2) 04:07:51 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000000040)="3854128d790e97395e", 0x6fffff9}}, 0x0) 04:07:51 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCADDRT(r0, 0x400454ca, &(0x7f00000000c0)={0xfa2e, @nfc={0x27, 0x0, 0x2}, @xdp, @phonet}) ioctl$TUNSETGROUP(r0, 0x800454e1, 0x0) [ 461.906410][T24050] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 461.939092][T24052] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 04:07:51 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000100)="cd6d610000", 0x5) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x3e2) [ 462.025578][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e293400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 04:07:51 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0xb960}, 0x10) write(r0, &(0x7f0000000380)="240000005a001f0014f9f407000904000a00fb75100002806e07580c12a300feffffff08", 0x24) 04:07:51 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000000040)="3854128d790e97395e", 0x6fffff9}}, 0x0) 04:07:51 executing program 0: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6800000000c259006c0000000000040072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r3) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 04:07:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddffffffff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) [ 462.212352][T24072] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 462.293228][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079641400: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 04:07:52 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000400)=ANY=[], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 04:07:52 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000100)="cd6d610000", 0x5) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x3e2) 04:07:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0xb960}, 0x10) write(r0, &(0x7f0000000380)="240000005a001f0014f9f407000904000a00fb75100002806e07580c12a300feffffff08", 0x24) 04:07:52 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000000040)="3854128d790e97395e", 0x6fffff9}}, 0x0) 04:07:52 executing program 0: sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c}, 0x1c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="6800000000c259006c0000000000040072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683626e00dcff7f0000ca6b78ad833488cfe4109eaf009edd0d69613d3cd62f00150200000001000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424cce98b2ca9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03fd45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7fb21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933b06759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb2576f3b5619c3a616c604f068773f6db9d661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b864f983d745f5865aad41d2915aae7602a0000d405e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580aee9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4cd5faae176a69b745eda2967199cc936859a538100000000000000dc10e13ef227f627a400e1ac1fa253d33fa74f172d3407ae4e1e347c0c31acc6a9aba37876c54ea9ceb9ff626ef9dd2b6bb7aa3804b9f2a8f2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916a39d3057d55183612b39e73aeeb6eaf14652dda68c98ef938e6515a94a71836469e2051d937eb85f3f2c9c40000caab2ab8b63f476b97419a3b7660df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e309e139beaa6d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d906551ca85ffa4add5647489b3960127696cf2f16625c0c10200000000c7a5ca60fdad159f2e44171f3963841086e3797a4825d081f2d987f05c534187738655d7dc958fd235658cd283a6554b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402fa6aa91fd037b3b79a433e08074ea2462974a00040000eb1cfa2638f56daee57ed15bc74de0fd87a9ce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76f822278d124638fec58faeb44158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b907bddd5e328661f4c06e01f7d7dc22174e5e627a67608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000000000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cf1ace2b322ac3b00000000000000009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a10200000006d729d3979676bffb3049166ab84a0f061991bd57c2566c10c282352aba05b6164e3f2491e4793e590dcc71de10da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60870fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe555318014a463abbbf7ccd6a92a5734e3ebfa878ffffe031f31de2183652e77c0539152f85a11acbdb46164c646aef651cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8912b7eda87489eb66fd5db1c053d9c2c7861552381646365066ef9a36a449c96485c22ad1a8423b7b89efbc6cd54db0bb0ea5f4f1e8773749ab6ac9a44d43593de7e66aa7ed7f3d4e7b211590c738888d02f2dbb0b2ba73ec72e1d8d60f859ed499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8c6dd7f8f611f25052946b9f67f680a886644776078adfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000000009267564f2d0714151bd22c69f7c1b0bdd91bec3b022ef3e8b1495f72af38150a68ce46839fbecbcb0564b0decbd23e5aa983b2dcc64a955f510dfd8dbd5b9508e5215b21"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000000)=r3) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @initdev}}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000280)="2c2da2ee918a3730f7b1fdb3c8bea25d86dd", 0x12}], 0x1) 04:07:52 executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000100)="cd6d610000", 0x5) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x3e2) [ 462.537314][T24092] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 04:07:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddffffffff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) 04:07:52 executing program 3: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0xb960}, 0x10) write(r0, &(0x7f0000000380)="240000005a001f0014f9f407000904000a00fb75100002806e07580c12a300feffffff08", 0x24) [ 462.620005][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888045a5a800: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 04:07:52 executing program 5: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000080)={&(0x7f0000000b40), 0x18, &(0x7f0000000b80)={&(0x7f0000000040)="3854128d790e97395e", 0x6fffff9}}, 0x0) [ 462.785081][T24106] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 04:07:52 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x300}}], 0x48}, 0x0) 04:07:52 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 462.925133][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cf8e000: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. 04:07:52 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddffffffff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) [ 463.094539][T24120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.220869][T24121] __nla_validate_parse: 8 callbacks suppressed [ 463.220887][T24121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:07:53 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000400)=ANY=[], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 04:07:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 04:07:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000700)=""/97, 0x61}], 0x2}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) 04:07:53 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x300}}], 0x48}, 0x0) 04:07:53 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000000)={'batadv_slave_1\x00'}) 04:07:53 executing program 1: r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddffffffff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast2}]}, 0x2c}}, 0x0) [ 463.551656][T24134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 04:07:53 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x300}}], 0x48}, 0x0) 04:07:53 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000000)={'batadv_slave_1\x00'}) 04:07:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 04:07:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000700)=""/97, 0x61}], 0x2}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) 04:07:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff4100000000", @ANYRES32=r2, @ANYBLOB="01000000002240001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x6) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) 04:07:53 executing program 2: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x300}}], 0x48}, 0x0) [ 463.967271][T24157] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 464.119414][T24160] bond8: (slave vlan8): Opening slave failed [ 464.239356][T24157] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:07:54 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000400)=ANY=[], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) 04:07:54 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8914, &(0x7f0000000000)={'batadv_slave_1\x00'}) 04:07:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 04:07:54 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000200)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100), 0x4) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) bind$802154_dgram(r1, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000002240), 0x400000000000192, 0x0) 04:07:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000700)=""/97, 0x61}], 0x2}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) 04:07:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff4100000000", @ANYRES32=r2, @ANYBLOB="01000000002240001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x6) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) [ 464.657560][T24209] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:07:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003a000511d21280788c63940d0124fc602f6e35400c0002000e00680037153e370400018025641d00d1bd", 0x2e}], 0x1}, 0x0) [ 464.782910][T24208] ieee802154 phy1 wpan1: encryption failed: -22 04:07:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x0) 04:07:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f0000000700)=""/97, 0x61}], 0x2}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xfffffffffffffed3, &(0x7f0000000940)=[{&(0x7f00000006c0)='O', 0x57e}], 0x1}}], 0x4000000000003bd, 0x8800) [ 464.926272][T24216] bond9: (slave vlan8): Opening slave failed [ 464.950880][T24255] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 465.002647][T24255] openvswitch: netlink: Either Ethernet header or EtherType is required. 04:07:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003a000511d21280788c63940d0124fc602f6e35400c0002000e00680037153e370400018025641d00d1bd", 0x2e}], 0x1}, 0x0) 04:07:54 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000200)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100), 0x4) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) bind$802154_dgram(r1, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000002240), 0x400000000000192, 0x0) 04:07:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff4100000000", @ANYRES32=r2, @ANYBLOB="01000000002240001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x6) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) [ 465.311586][T24268] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 465.343353][T24268] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 465.358514][T24269] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 465.571518][T24276] bond10: (slave vlan8): Opening slave failed 04:07:55 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000200)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100), 0x4) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) bind$802154_dgram(r1, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000002240), 0x400000000000192, 0x0) 04:07:55 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:07:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 04:07:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x7}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x16, 0x0, 0x4) 04:07:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003a000511d21280788c63940d0124fc602f6e35400c0002000e00680037153e370400018025641d00d1bd", 0x2e}], 0x1}, 0x0) 04:07:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000ff4100000000", @ANYRES32=r2, @ANYBLOB="01000000002240001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x6) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) [ 465.817843][T24319] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 04:07:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) [ 465.881894][T24319] openvswitch: netlink: Either Ethernet header or EtherType is required. 04:07:55 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x7}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x16, 0x0, 0x4) 04:07:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000003a000511d21280788c63940d0124fc602f6e35400c0002000e00680037153e370400018025641d00d1bd", 0x2e}], 0x1}, 0x0) [ 466.042014][T24332] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 466.065993][T24330] ieee802154 phy1 wpan1: encryption failed: -22 [ 466.301601][T24337] bond11: (slave vlan8): Opening slave failed 04:07:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x7}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x16, 0x0, 0x4) 04:07:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) [ 466.539345][T24383] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. 04:07:56 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @short}, 0x14) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000200)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000100), 0x4) r1 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) bind$802154_dgram(r1, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000002240), 0x400000000000192, 0x0) [ 466.598139][T24383] openvswitch: netlink: Either Ethernet header or EtherType is required. 04:07:56 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000300)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x3, @loopback, 0x8001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x4c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000140)="d5150593dada412010e670a24ac8591f0900"/33, 0x21) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 04:07:56 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x7}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x16, 0x0, 0x4) 04:07:56 executing program 3: pipe(&(0x7f0000005bc0)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000100)="0e", 0x1) write$ppp(r0, 0x0, 0xe) 04:07:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) 04:07:56 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:07:56 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:07:57 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:07:57 executing program 3: pipe(&(0x7f0000005bc0)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000100)="0e", 0x1) write$ppp(r0, 0x0, 0xe) 04:07:57 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:07:57 executing program 3: pipe(&(0x7f0000005bc0)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000100)="0e", 0x1) write$ppp(r0, 0x0, 0xe) 04:07:58 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000300)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x3, @loopback, 0x8001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x4c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000140)="d5150593dada412010e670a24ac8591f0900"/33, 0x21) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 04:07:58 executing program 3: pipe(&(0x7f0000005bc0)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r0, &(0x7f0000000100)="0e", 0x1) write$ppp(r0, 0x0, 0xe) 04:07:58 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:07:59 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:07:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000300)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x3, @loopback, 0x8001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x4c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000140)="d5150593dada412010e670a24ac8591f0900"/33, 0x21) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 04:07:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000300)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x3, @loopback, 0x8001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x4c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000140)="d5150593dada412010e670a24ac8591f0900"/33, 0x21) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 04:07:59 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:07:59 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:08:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000300)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x3, @loopback, 0x8001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x4c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000140)="d5150593dada412010e670a24ac8591f0900"/33, 0x21) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 04:08:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000300)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x3, @loopback, 0x8001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x4c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000140)="d5150593dada412010e670a24ac8591f0900"/33, 0x21) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 04:08:00 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000300)=0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='vegas\x00', 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x3, @loopback, 0x8001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x4c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) setsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000140)="d5150593dada412010e670a24ac8591f0900"/33, 0x21) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) 04:08:00 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:08:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffe, &(0x7f00000000c0)="b9ff04c6630d698cb89e0bf088ca1fffffff0e000000632f77fbac14143fee", 0x0, 0x2f, 0x0, 0x4000, 0xfffffffffffffe2a}, 0x28) 04:08:01 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:08:01 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:08:01 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffe, &(0x7f00000000c0)="b9ff04c6630d698cb89e0bf088ca1fffffff0e000000632f77fbac14143fee", 0x0, 0x2f, 0x0, 0x4000, 0xfffffffffffffe2a}, 0x28) 04:08:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newlink={0x20, 0x11, 0x425, 0x0, 0xa000000, {0x10, 0x0, 0x0, r5}}, 0x20}}, 0x0) 04:08:02 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x12) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r0, r1, 0x0, 0xfff) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xf000) close(r4) sendfile(r2, r1, 0x0, 0x8001) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x1, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3c}, 0x0, @in6=@private0, 0x0, 0x0, 0x0, 0x81}}, 0xe8) 04:08:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffe, &(0x7f00000000c0)="b9ff04c6630d698cb89e0bf088ca1fffffff0e000000632f77fbac14143fee", 0x0, 0x2f, 0x0, 0x4000, 0xfffffffffffffe2a}, 0x28) [ 472.972976][T24514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 473.292573][T24516] bond12 (unregistering): Released all slaves 04:08:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x39ca}}) 04:08:03 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800000800000001) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x630, 0x368, 0x0, 0xa0, 0x368, 0x598, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}, {{@uncond, 0x0, 0x2a0, 0x2c8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'dummy0\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x690) 04:08:03 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x80, 0x0, 0x0, @remote}, 0x32) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) [ 473.607663][T24516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 473.609017][T24589] xt_TPROXY: Can be used only with -p tcp or -p udp 04:08:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x39ca}}) 04:08:03 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800000800000001) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x630, 0x368, 0x0, 0xa0, 0x368, 0x598, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}, {{@uncond, 0x0, 0x2a0, 0x2c8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'dummy0\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x690) 04:08:03 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffe, &(0x7f00000000c0)="b9ff04c6630d698cb89e0bf088ca1fffffff0e000000632f77fbac14143fee", 0x0, 0x2f, 0x0, 0x4000, 0xfffffffffffffe2a}, 0x28) 04:08:03 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:08:03 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x80, 0x0, 0x0, @remote}, 0x32) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) 04:08:03 executing program 4: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x39ca}}) [ 474.055741][T24634] xt_TPROXY: Can be used only with -p tcp or -p udp 04:08:03 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800000800000001) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x630, 0x368, 0x0, 0xa0, 0x368, 0x598, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}, {{@uncond, 0x0, 0x2a0, 0x2c8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'dummy0\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x690) 04:08:04 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x5, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) 04:08:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:08:04 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x80, 0x0, 0x0, @remote}, 0x32) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) 04:08:04 executing program 4: r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x0, 0x0, 0x39ca}}) [ 474.315487][T24644] xt_TPROXY: Can be used only with -p tcp or -p udp 04:08:04 executing program 2: r0 = socket$inet(0x2, 0x3, 0x800000800000001) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x630, 0x368, 0x0, 0xa0, 0x368, 0x598, 0x598, 0x598, 0x598, 0x598, 0x598, 0x6, 0x0, {[{{@ip={@loopback, @empty, 0x0, 0x0, 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x64}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}, {{@uncond, 0x0, 0x2a0, 0x2c8, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'dummy0\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x690) 04:08:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 04:08:04 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x5, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) 04:08:04 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x5, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) 04:08:04 executing program 0: bind(0xffffffffffffffff, &(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x80, 0x0, 0x0, @remote}, 0x32) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet6(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4096, &(0x7f0000001140)=0x1000) [ 474.598483][T24659] xt_TPROXY: Can be used only with -p tcp or -p udp 04:08:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:08:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 04:08:04 executing program 2: unshare(0x6c060000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000180)=0x3f, 0x4) mmap(&(0x7f0000117000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0xcc8e9000) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x4) write$binfmt_script(r3, 0x0, 0xfffffe3e) sendfile(r2, r3, &(0x7f0000000240)=0xa3, 0x65) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 04:08:04 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x5, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) 04:08:04 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x5, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) 04:08:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000003d80)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 04:08:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 475.002088][T24678] device geneve2 entered promiscuous mode 04:08:04 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:08:04 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x5, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) 04:08:05 executing program 4: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080)=0x5, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) 04:08:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000003d80)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 04:08:05 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 04:08:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) 04:08:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000003d80)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 04:08:05 executing program 2: unshare(0x6c060000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000180)=0x3f, 0x4) mmap(&(0x7f0000117000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0xcc8e9000) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x4) write$binfmt_script(r3, 0x0, 0xfffffe3e) sendfile(r2, r3, &(0x7f0000000240)=0xa3, 0x65) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 04:08:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e704095f9f95274b0a000a845865400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 04:08:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)={0x3c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@empty}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="b672"]}]}, 0x3c}], 0x1}, 0x0) 04:08:05 executing program 3: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@private1}}]}, 0x158}}, 0x0) 04:08:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000003d80)=@newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0xc}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}]}, 0x30}}, 0x0) 04:08:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) [ 475.973870][T24734] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:08:05 executing program 3: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@private1}}]}, 0x158}}, 0x0) 04:08:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e704095f9f95274b0a000a845865400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) [ 476.026170][T24734] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 04:08:05 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)={0x3c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@empty}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="b672"]}]}, 0x3c}], 0x1}, 0x0) 04:08:06 executing program 0: unshare(0x6c060000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000180)=0x3f, 0x4) mmap(&(0x7f0000117000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0xcc8e9000) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x4) write$binfmt_script(r3, 0x0, 0xfffffe3e) sendfile(r2, r3, &(0x7f0000000240)=0xa3, 0x65) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 04:08:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e704095f9f95274b0a000a845865400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 04:08:06 executing program 3: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@private1}}]}, 0x158}}, 0x0) [ 476.379124][T24753] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 476.430053][T24753] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 476.595775][T24760] device geneve3 entered promiscuous mode 04:08:06 executing program 2: unshare(0x6c060000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000180)=0x3f, 0x4) mmap(&(0x7f0000117000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0xcc8e9000) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x4) write$binfmt_script(r3, 0x0, 0xfffffe3e) sendfile(r2, r3, &(0x7f0000000240)=0xa3, 0x65) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 04:08:06 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)={0x3c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@empty}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="b672"]}]}, 0x3c}], 0x1}, 0x0) 04:08:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e704095f9f95274b0a000a845865400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 04:08:06 executing program 3: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@private1}}]}, 0x158}}, 0x0) 04:08:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) [ 477.182087][T24807] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 477.221906][T24807] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 04:08:07 executing program 4: unshare(0x6c060000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000180)=0x3f, 0x4) mmap(&(0x7f0000117000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0xcc8e9000) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x4) write$binfmt_script(r3, 0x0, 0xfffffe3e) sendfile(r2, r3, &(0x7f0000000240)=0xa3, 0x65) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 04:08:07 executing program 0: unshare(0x6c060000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000180)=0x3f, 0x4) mmap(&(0x7f0000117000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0xcc8e9000) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x4) write$binfmt_script(r3, 0x0, 0xfffffe3e) sendfile(r2, r3, &(0x7f0000000240)=0xa3, 0x65) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 04:08:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x40d, 0x0, 0x0, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 04:08:07 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000000)={0x3c, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@empty}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="b672"]}]}, 0x3c}], 0x1}, 0x0) [ 477.550268][T24827] device geneve2 entered promiscuous mode 04:08:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x40d, 0x0, 0x0, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) [ 477.785698][T24838] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 477.858063][T24838] netlink: 'syz-executor.1': attribute type 16 has an invalid length. 04:08:07 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x2, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38) 04:08:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x40d, 0x0, 0x0, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 04:08:08 executing program 2: unshare(0x6c060000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000180)=0x3f, 0x4) mmap(&(0x7f0000117000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0xcc8e9000) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x4) write$binfmt_script(r3, 0x0, 0xfffffe3e) sendfile(r2, r3, &(0x7f0000000240)=0xa3, 0x65) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 04:08:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(r1, &(0x7f0000003240)=""/4096, 0x100000205, 0x0, 0x0, 0x415) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0) 04:08:08 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x2, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38) 04:08:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x40d, 0x0, 0x0, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) 04:08:08 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x2, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38) 04:08:08 executing program 4: unshare(0x6c060000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000180)=0x3f, 0x4) mmap(&(0x7f0000117000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0xcc8e9000) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x4) write$binfmt_script(r3, 0x0, 0xfffffe3e) sendfile(r2, r3, &(0x7f0000000240)=0xa3, 0x65) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 04:08:08 executing program 0: unshare(0x6c060000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000180)=0x3f, 0x4) mmap(&(0x7f0000117000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0xcc8e9000) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x4) write$binfmt_script(r3, 0x0, 0xfffffe3e) sendfile(r2, r3, &(0x7f0000000240)=0xa3, 0x65) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 04:08:08 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) listen(r0, 0x3) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="480000001400e702095f9f95274b0a0002840200400402004e20000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 04:08:08 executing program 1: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x2, 0x4, 0x4, 0x1}, 0x3c) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38) 04:08:09 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) listen(r0, 0x3) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="480000001400e702095f9f95274b0a0002840200400402004e20000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 04:08:09 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000100)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 04:08:09 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) read(r0, &(0x7f0000000080)=""/228, 0xe4) 04:08:09 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) listen(r0, 0x3) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="480000001400e702095f9f95274b0a0002840200400402004e20000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 04:08:09 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 04:08:09 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) read(r0, &(0x7f0000000080)=""/228, 0xe4) 04:08:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x34}}, 0x0) 04:08:10 executing program 3: r0 = socket$inet(0x2, 0x5, 0x0) listen(r0, 0x3) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="480000001400e702095f9f95274b0a0002840200400402004e20000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 04:08:10 executing program 4: unshare(0x6c060000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='wlan0\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x1e, 0x0}}], 0x300, 0x0) setsockopt$sock_int(r0, 0x1, 0x26, &(0x7f0000000180)=0x3f, 0x4) mmap(&(0x7f0000117000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0xcc8e9000) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x4) write$binfmt_script(r3, 0x0, 0xfffffe3e) sendfile(r2, r3, &(0x7f0000000240)=0xa3, 0x65) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) 04:08:10 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) read(r0, &(0x7f0000000080)=""/228, 0xe4) 04:08:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x34}}, 0x0) 04:08:10 executing program 3: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 04:08:10 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 04:08:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x34}}, 0x0) 04:08:10 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) read(r0, &(0x7f0000000080)=""/228, 0xe4) 04:08:11 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 04:08:11 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 04:08:11 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003440)='{', 0x7ffff000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 04:08:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x34, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_ZONE={0x6}]}, 0x34}}, 0x0) 04:08:11 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 04:08:11 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 04:08:11 executing program 3: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 04:08:11 executing program 1: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 04:08:11 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000040)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0) 04:08:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x1, 0x1c6, [], 0x0, 0x0, &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'macvlan1\x00', 'batadv0\x00', 'ipvlan1\x00', 'wg1\x00', @link_local, [], @dev, [], 0x6e, 0xe6, 0x136, [], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x104, 0x0, 0x0, "b141bb47b50efbbae3f4b8e3b6e623f5b8c0b7115e1ee898e3db8309c8f92579f6594d1d3f1e4d7f11e20501094319fcebc2c1d68b8e8d7dcce5d6461f7bc495"}}}], @common=@log={'log\x00', 0x28, {{0x0, "83fec03aa0230506490ca3a387c709cd1428be063e692b3fd67eecbd5dc8"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x23e) 04:08:12 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000280)=@abs={0x1}, 0x6e) listen(r0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x201) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2003}, 0x4) syz_emit_ethernet(0x300cce, &(0x7f0000000000)=ANY=[], 0x0) 04:08:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x1, 0x1c6, [], 0x0, 0x0, &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'macvlan1\x00', 'batadv0\x00', 'ipvlan1\x00', 'wg1\x00', @link_local, [], @dev, [], 0x6e, 0xe6, 0x136, [], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x104, 0x0, 0x0, "b141bb47b50efbbae3f4b8e3b6e623f5b8c0b7115e1ee898e3db8309c8f92579f6594d1d3f1e4d7f11e20501094319fcebc2c1d68b8e8d7dcce5d6461f7bc495"}}}], @common=@log={'log\x00', 0x28, {{0x0, "83fec03aa0230506490ca3a387c709cd1428be063e692b3fd67eecbd5dc8"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x23e) 04:08:12 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003440)='{', 0x7ffff000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 04:08:12 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 04:08:12 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x1, 0x1c6, [], 0x0, 0x0, &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'macvlan1\x00', 'batadv0\x00', 'ipvlan1\x00', 'wg1\x00', @link_local, [], @dev, [], 0x6e, 0xe6, 0x136, [], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x104, 0x0, 0x0, "b141bb47b50efbbae3f4b8e3b6e623f5b8c0b7115e1ee898e3db8309c8f92579f6594d1d3f1e4d7f11e20501094319fcebc2c1d68b8e8d7dcce5d6461f7bc495"}}}], @common=@log={'log\x00', 0x28, {{0x0, "83fec03aa0230506490ca3a387c709cd1428be063e692b3fd67eecbd5dc8"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x23e) 04:08:12 executing program 3: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 04:08:13 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x1, 0x1c6, [], 0x0, 0x0, &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{0x0, 0x0, 0x0, 'macvlan1\x00', 'batadv0\x00', 'ipvlan1\x00', 'wg1\x00', @link_local, [], @dev, [], 0x6e, 0xe6, 0x136, [], [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x104, 0x0, 0x0, "b141bb47b50efbbae3f4b8e3b6e623f5b8c0b7115e1ee898e3db8309c8f92579f6594d1d3f1e4d7f11e20501094319fcebc2c1d68b8e8d7dcce5d6461f7bc495"}}}], @common=@log={'log\x00', 0x28, {{0x0, "83fec03aa0230506490ca3a387c709cd1428be063e692b3fd67eecbd5dc8"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1}]}, 0x23e) 04:08:13 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000280)=@abs={0x1}, 0x6e) listen(r0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x201) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2003}, 0x4) syz_emit_ethernet(0x300cce, &(0x7f0000000000)=ANY=[], 0x0) 04:08:13 executing program 1: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 04:08:13 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000280)=@abs={0x1}, 0x6e) listen(r0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x201) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2003}, 0x4) syz_emit_ethernet(0x300cce, &(0x7f0000000000)=ANY=[], 0x0) 04:08:13 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003440)='{', 0x7ffff000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 04:08:13 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 04:08:14 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000280)=@abs={0x1}, 0x6e) listen(r0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x201) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2003}, 0x4) syz_emit_ethernet(0x300cce, &(0x7f0000000000)=ANY=[], 0x0) 04:08:14 executing program 3: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 04:08:14 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000280)=@abs={0x1}, 0x6e) listen(r0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x201) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2003}, 0x4) syz_emit_ethernet(0x300cce, &(0x7f0000000000)=ANY=[], 0x0) 04:08:14 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003440)='{', 0x7ffff000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 04:08:14 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003440)='{', 0x7ffff000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 04:08:14 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000280)=@abs={0x1}, 0x6e) listen(r0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x201) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2003}, 0x4) syz_emit_ethernet(0x300cce, &(0x7f0000000000)=ANY=[], 0x0) 04:08:15 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000280)=@abs={0x1}, 0x6e) listen(r0, 0x0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x201) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2003}, 0x4) syz_emit_ethernet(0x300cce, &(0x7f0000000000)=ANY=[], 0x0) 04:08:15 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003440)='{', 0x7ffff000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 04:08:17 executing program 1: unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24004001) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) socket(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0xc0000) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 04:08:17 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) 04:08:17 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003440)='{', 0x7ffff000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 04:08:17 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000140), 0x12) 04:08:17 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 04:08:17 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003440)='{', 0x7ffff000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 04:08:17 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000140), 0x12) 04:08:18 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000140), 0x12) 04:08:18 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r0, &(0x7f0000000140), 0x12) 04:08:18 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003440)='{', 0x7ffff000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 04:08:18 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 04:08:18 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000003440)='{', 0x7ffff000}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 04:08:18 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) 04:08:18 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) 04:08:18 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) 04:08:19 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 04:08:19 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0000001c00810ee00f80ecdb4cb9e307f029a00d0000002f0106fb0a0002000900000000000f0005000e800600", 0x2e}], 0x1}, 0x0) 04:08:20 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) 04:08:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @generic='\t']}, 0x1c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/113, 0x71}], 0x3, &(0x7f0000001480)=""/154, 0x9a}, 0x6}, {{&(0x7f0000001540)=@qipcrtr, 0x80, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/203, 0xcb}], 0x2, &(0x7f00000017c0)=""/233, 0xe9}, 0x2}, {{&(0x7f00000018c0)=@generic, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000001940)=""/251, 0xfb}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/249, 0xf9}], 0x4, &(0x7f0000001c40)=""/253, 0xfd}, 0x694}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001d40)=""/228, 0xe4}, {&(0x7f0000001e40)=""/205, 0xcd}, {&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/140, 0x8c}, {&(0x7f00000021c0)=""/104, 0x68}], 0x6}, 0x2}, {{&(0x7f00000022c0)=@l2tp, 0x80, &(0x7f0000003480)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/18, 0x12}, {&(0x7f0000003380)=""/201, 0xc9}], 0x3, &(0x7f00000034c0)=""/139, 0x8b}}, {{&(0x7f0000003580)=@alg, 0x80, &(0x7f00000047c0)=[{&(0x7f0000003600)=""/55, 0x37}, {&(0x7f0000003640)=""/103, 0x67}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/96, 0x60}, {&(0x7f0000004740)=""/111, 0x6f}], 0x5, &(0x7f0000004840)=""/71, 0x47}, 0x4}, {{&(0x7f00000048c0)=@can, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004940)=""/202, 0xca}, {&(0x7f0000004a40)=""/58, 0x3a}, {&(0x7f0000004a80)=""/183, 0xb7}, {&(0x7f0000004b40)=""/205, 0xcd}, {&(0x7f0000004c40)=""/240, 0xf0}], 0x5, &(0x7f0000004dc0)=""/197, 0xc5}, 0xfffffff8}, {{&(0x7f0000004ec0), 0x80, &(0x7f0000005380)=[{&(0x7f0000004f40)=""/16, 0x10}, {&(0x7f0000004f80)=""/81, 0x51}, {&(0x7f0000005000)=""/31, 0x1f}, {&(0x7f0000005040)=""/246, 0xf6}, {&(0x7f0000005140)=""/134, 0x86}, {&(0x7f0000005200)=""/184, 0xb8}, {&(0x7f00000052c0)=""/70, 0x46}, {&(0x7f0000005340)=""/64, 0x40}], 0x8, &(0x7f0000005400)=""/157, 0x9d}, 0x3}], 0x8, 0x1, &(0x7f00000056c0)={0x77359400}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x20044010) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42950}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x18}}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x508f, 0x92}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x3}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4d3, 0x2ac}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}]}]}}}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = accept(r0, &(0x7f00000058c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000005940)=0x80) sendmsg$kcm(r5, &(0x7f0000005bc0)={&(0x7f0000005980)=@phonet={0x23, 0x40, 0x80, 0x4}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005a00)="87ef6e8172bd97c340a5d3b5d9d86d360e7f886975666d3c909f534d327aca04f2487507f58c6e1d4ca902732a6af0e0e9", 0x31}], 0x1, &(0x7f0000005a80)=[{0x38, 0x113, 0x1, "d9c1d558d88e637635054cbabc9f990ace4e37600da7987230f2b8e73afc5f4b54307e04063081"}, {0x108, 0x115, 0x8882, "c0cc46015de606f58a5b248ac167235cd46efceadb26ba734b6f227b09393ff90f7fe5fef72d7fc7058bf95df7c79ec01e883878f19161766b9f2bacc3861c61f91868758e0e08289fbe54de3715f567603a5d6cce1000553c51879060e3cdb494a3a188795c149aa3b27556decb64991e0770ad646add5804ba7ef89a512f826ca5afbd19307caf9d2c8b468f6d8b5e20e56f52b7a2dc5e324a0721a8bbf745a403b47f26261e411a3a0e2ad2f3dfd8b546963d6b6d0fa8582a6780ca89df2427ef67190600e6b7b98630a8b7be2f7f5d47ccce76186176246dcc703858b1ef2044e8b3f8a301b9c631fc053dc2d2997da17206c0"}], 0x140}, 0x4040804) 04:08:20 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) 04:08:20 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) [ 490.519599][T25385] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 490.584534][T25389] bridge0: port 4(syz_tun) entered blocking state [ 490.607963][T25389] bridge0: port 4(syz_tun) entered disabled state 04:08:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0000001c00810ee00f80ecdb4cb9e307f029a00d0000002f0106fb0a0002000900000000000f0005000e800600", 0x2e}], 0x1}, 0x0) [ 490.641061][T25389] device syz_tun entered promiscuous mode [ 490.687992][T25389] bridge0: port 4(syz_tun) entered blocking state [ 490.694545][T25389] bridge0: port 4(syz_tun) entered forwarding state 04:08:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @generic='\t']}, 0x1c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/113, 0x71}], 0x3, &(0x7f0000001480)=""/154, 0x9a}, 0x6}, {{&(0x7f0000001540)=@qipcrtr, 0x80, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/203, 0xcb}], 0x2, &(0x7f00000017c0)=""/233, 0xe9}, 0x2}, {{&(0x7f00000018c0)=@generic, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000001940)=""/251, 0xfb}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/249, 0xf9}], 0x4, &(0x7f0000001c40)=""/253, 0xfd}, 0x694}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001d40)=""/228, 0xe4}, {&(0x7f0000001e40)=""/205, 0xcd}, {&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/140, 0x8c}, {&(0x7f00000021c0)=""/104, 0x68}], 0x6}, 0x2}, {{&(0x7f00000022c0)=@l2tp, 0x80, &(0x7f0000003480)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/18, 0x12}, {&(0x7f0000003380)=""/201, 0xc9}], 0x3, &(0x7f00000034c0)=""/139, 0x8b}}, {{&(0x7f0000003580)=@alg, 0x80, &(0x7f00000047c0)=[{&(0x7f0000003600)=""/55, 0x37}, {&(0x7f0000003640)=""/103, 0x67}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/96, 0x60}, {&(0x7f0000004740)=""/111, 0x6f}], 0x5, &(0x7f0000004840)=""/71, 0x47}, 0x4}, {{&(0x7f00000048c0)=@can, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004940)=""/202, 0xca}, {&(0x7f0000004a40)=""/58, 0x3a}, {&(0x7f0000004a80)=""/183, 0xb7}, {&(0x7f0000004b40)=""/205, 0xcd}, {&(0x7f0000004c40)=""/240, 0xf0}], 0x5, &(0x7f0000004dc0)=""/197, 0xc5}, 0xfffffff8}, {{&(0x7f0000004ec0), 0x80, &(0x7f0000005380)=[{&(0x7f0000004f40)=""/16, 0x10}, {&(0x7f0000004f80)=""/81, 0x51}, {&(0x7f0000005000)=""/31, 0x1f}, {&(0x7f0000005040)=""/246, 0xf6}, {&(0x7f0000005140)=""/134, 0x86}, {&(0x7f0000005200)=""/184, 0xb8}, {&(0x7f00000052c0)=""/70, 0x46}, {&(0x7f0000005340)=""/64, 0x40}], 0x8, &(0x7f0000005400)=""/157, 0x9d}, 0x3}], 0x8, 0x1, &(0x7f00000056c0)={0x77359400}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x20044010) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42950}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x18}}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x508f, 0x92}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x3}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4d3, 0x2ac}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}]}]}}}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = accept(r0, &(0x7f00000058c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000005940)=0x80) sendmsg$kcm(r5, &(0x7f0000005bc0)={&(0x7f0000005980)=@phonet={0x23, 0x40, 0x80, 0x4}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005a00)="87ef6e8172bd97c340a5d3b5d9d86d360e7f886975666d3c909f534d327aca04f2487507f58c6e1d4ca902732a6af0e0e9", 0x31}], 0x1, &(0x7f0000005a80)=[{0x38, 0x113, 0x1, "d9c1d558d88e637635054cbabc9f990ace4e37600da7987230f2b8e73afc5f4b54307e04063081"}, {0x108, 0x115, 0x8882, "c0cc46015de606f58a5b248ac167235cd46efceadb26ba734b6f227b09393ff90f7fe5fef72d7fc7058bf95df7c79ec01e883878f19161766b9f2bacc3861c61f91868758e0e08289fbe54de3715f567603a5d6cce1000553c51879060e3cdb494a3a188795c149aa3b27556decb64991e0770ad646add5804ba7ef89a512f826ca5afbd19307caf9d2c8b468f6d8b5e20e56f52b7a2dc5e324a0721a8bbf745a403b47f26261e411a3a0e2ad2f3dfd8b546963d6b6d0fa8582a6780ca89df2427ef67190600e6b7b98630a8b7be2f7f5d47ccce76186176246dcc703858b1ef2044e8b3f8a301b9c631fc053dc2d2997da17206c0"}], 0x140}, 0x4040804) [ 490.855356][T25404] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 04:08:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0000001c00810ee00f80ecdb4cb9e307f029a00d0000002f0106fb0a0002000900000000000f0005000e800600", 0x2e}], 0x1}, 0x0) 04:08:20 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @generic='\t']}, 0x1c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/113, 0x71}], 0x3, &(0x7f0000001480)=""/154, 0x9a}, 0x6}, {{&(0x7f0000001540)=@qipcrtr, 0x80, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/203, 0xcb}], 0x2, &(0x7f00000017c0)=""/233, 0xe9}, 0x2}, {{&(0x7f00000018c0)=@generic, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000001940)=""/251, 0xfb}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/249, 0xf9}], 0x4, &(0x7f0000001c40)=""/253, 0xfd}, 0x694}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001d40)=""/228, 0xe4}, {&(0x7f0000001e40)=""/205, 0xcd}, {&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/140, 0x8c}, {&(0x7f00000021c0)=""/104, 0x68}], 0x6}, 0x2}, {{&(0x7f00000022c0)=@l2tp, 0x80, &(0x7f0000003480)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/18, 0x12}, {&(0x7f0000003380)=""/201, 0xc9}], 0x3, &(0x7f00000034c0)=""/139, 0x8b}}, {{&(0x7f0000003580)=@alg, 0x80, &(0x7f00000047c0)=[{&(0x7f0000003600)=""/55, 0x37}, {&(0x7f0000003640)=""/103, 0x67}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/96, 0x60}, {&(0x7f0000004740)=""/111, 0x6f}], 0x5, &(0x7f0000004840)=""/71, 0x47}, 0x4}, {{&(0x7f00000048c0)=@can, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004940)=""/202, 0xca}, {&(0x7f0000004a40)=""/58, 0x3a}, {&(0x7f0000004a80)=""/183, 0xb7}, {&(0x7f0000004b40)=""/205, 0xcd}, {&(0x7f0000004c40)=""/240, 0xf0}], 0x5, &(0x7f0000004dc0)=""/197, 0xc5}, 0xfffffff8}, {{&(0x7f0000004ec0), 0x80, &(0x7f0000005380)=[{&(0x7f0000004f40)=""/16, 0x10}, {&(0x7f0000004f80)=""/81, 0x51}, {&(0x7f0000005000)=""/31, 0x1f}, {&(0x7f0000005040)=""/246, 0xf6}, {&(0x7f0000005140)=""/134, 0x86}, {&(0x7f0000005200)=""/184, 0xb8}, {&(0x7f00000052c0)=""/70, 0x46}, {&(0x7f0000005340)=""/64, 0x40}], 0x8, &(0x7f0000005400)=""/157, 0x9d}, 0x3}], 0x8, 0x1, &(0x7f00000056c0)={0x77359400}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x20044010) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42950}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x18}}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x508f, 0x92}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x3}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4d3, 0x2ac}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}]}]}}}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = accept(r0, &(0x7f00000058c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000005940)=0x80) sendmsg$kcm(r5, &(0x7f0000005bc0)={&(0x7f0000005980)=@phonet={0x23, 0x40, 0x80, 0x4}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005a00)="87ef6e8172bd97c340a5d3b5d9d86d360e7f886975666d3c909f534d327aca04f2487507f58c6e1d4ca902732a6af0e0e9", 0x31}], 0x1, &(0x7f0000005a80)=[{0x38, 0x113, 0x1, "d9c1d558d88e637635054cbabc9f990ace4e37600da7987230f2b8e73afc5f4b54307e04063081"}, {0x108, 0x115, 0x8882, "c0cc46015de606f58a5b248ac167235cd46efceadb26ba734b6f227b09393ff90f7fe5fef72d7fc7058bf95df7c79ec01e883878f19161766b9f2bacc3861c61f91868758e0e08289fbe54de3715f567603a5d6cce1000553c51879060e3cdb494a3a188795c149aa3b27556decb64991e0770ad646add5804ba7ef89a512f826ca5afbd19307caf9d2c8b468f6d8b5e20e56f52b7a2dc5e324a0721a8bbf745a403b47f26261e411a3a0e2ad2f3dfd8b546963d6b6d0fa8582a6780ca89df2427ef67190600e6b7b98630a8b7be2f7f5d47ccce76186176246dcc703858b1ef2044e8b3f8a301b9c631fc053dc2d2997da17206c0"}], 0x140}, 0x4040804) [ 491.174393][T25410] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 04:08:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e0000001c00810ee00f80ecdb4cb9e307f029a00d0000002f0106fb0a0002000900000000000f0005000e800600", 0x2e}], 0x1}, 0x0) 04:08:21 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) 04:08:21 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 04:08:21 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @generic='\t']}, 0x1c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/113, 0x71}], 0x3, &(0x7f0000001480)=""/154, 0x9a}, 0x6}, {{&(0x7f0000001540)=@qipcrtr, 0x80, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/203, 0xcb}], 0x2, &(0x7f00000017c0)=""/233, 0xe9}, 0x2}, {{&(0x7f00000018c0)=@generic, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000001940)=""/251, 0xfb}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/249, 0xf9}], 0x4, &(0x7f0000001c40)=""/253, 0xfd}, 0x694}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001d40)=""/228, 0xe4}, {&(0x7f0000001e40)=""/205, 0xcd}, {&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/140, 0x8c}, {&(0x7f00000021c0)=""/104, 0x68}], 0x6}, 0x2}, {{&(0x7f00000022c0)=@l2tp, 0x80, &(0x7f0000003480)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/18, 0x12}, {&(0x7f0000003380)=""/201, 0xc9}], 0x3, &(0x7f00000034c0)=""/139, 0x8b}}, {{&(0x7f0000003580)=@alg, 0x80, &(0x7f00000047c0)=[{&(0x7f0000003600)=""/55, 0x37}, {&(0x7f0000003640)=""/103, 0x67}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/96, 0x60}, {&(0x7f0000004740)=""/111, 0x6f}], 0x5, &(0x7f0000004840)=""/71, 0x47}, 0x4}, {{&(0x7f00000048c0)=@can, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004940)=""/202, 0xca}, {&(0x7f0000004a40)=""/58, 0x3a}, {&(0x7f0000004a80)=""/183, 0xb7}, {&(0x7f0000004b40)=""/205, 0xcd}, {&(0x7f0000004c40)=""/240, 0xf0}], 0x5, &(0x7f0000004dc0)=""/197, 0xc5}, 0xfffffff8}, {{&(0x7f0000004ec0), 0x80, &(0x7f0000005380)=[{&(0x7f0000004f40)=""/16, 0x10}, {&(0x7f0000004f80)=""/81, 0x51}, {&(0x7f0000005000)=""/31, 0x1f}, {&(0x7f0000005040)=""/246, 0xf6}, {&(0x7f0000005140)=""/134, 0x86}, {&(0x7f0000005200)=""/184, 0xb8}, {&(0x7f00000052c0)=""/70, 0x46}, {&(0x7f0000005340)=""/64, 0x40}], 0x8, &(0x7f0000005400)=""/157, 0x9d}, 0x3}], 0x8, 0x1, &(0x7f00000056c0)={0x77359400}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x20044010) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42950}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x18}}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x508f, 0x92}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x3}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4d3, 0x2ac}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}]}]}}}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = accept(r0, &(0x7f00000058c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000005940)=0x80) sendmsg$kcm(r5, &(0x7f0000005bc0)={&(0x7f0000005980)=@phonet={0x23, 0x40, 0x80, 0x4}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005a00)="87ef6e8172bd97c340a5d3b5d9d86d360e7f886975666d3c909f534d327aca04f2487507f58c6e1d4ca902732a6af0e0e9", 0x31}], 0x1, &(0x7f0000005a80)=[{0x38, 0x113, 0x1, "d9c1d558d88e637635054cbabc9f990ace4e37600da7987230f2b8e73afc5f4b54307e04063081"}, {0x108, 0x115, 0x8882, "c0cc46015de606f58a5b248ac167235cd46efceadb26ba734b6f227b09393ff90f7fe5fef72d7fc7058bf95df7c79ec01e883878f19161766b9f2bacc3861c61f91868758e0e08289fbe54de3715f567603a5d6cce1000553c51879060e3cdb494a3a188795c149aa3b27556decb64991e0770ad646add5804ba7ef89a512f826ca5afbd19307caf9d2c8b468f6d8b5e20e56f52b7a2dc5e324a0721a8bbf745a403b47f26261e411a3a0e2ad2f3dfd8b546963d6b6d0fa8582a6780ca89df2427ef67190600e6b7b98630a8b7be2f7f5d47ccce76186176246dcc703858b1ef2044e8b3f8a301b9c631fc053dc2d2997da17206c0"}], 0x140}, 0x4040804) [ 491.453680][T25416] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. 04:08:21 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) 04:08:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @generic='\t']}, 0x1c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/113, 0x71}], 0x3, &(0x7f0000001480)=""/154, 0x9a}, 0x6}, {{&(0x7f0000001540)=@qipcrtr, 0x80, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/203, 0xcb}], 0x2, &(0x7f00000017c0)=""/233, 0xe9}, 0x2}, {{&(0x7f00000018c0)=@generic, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000001940)=""/251, 0xfb}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/249, 0xf9}], 0x4, &(0x7f0000001c40)=""/253, 0xfd}, 0x694}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001d40)=""/228, 0xe4}, {&(0x7f0000001e40)=""/205, 0xcd}, {&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/140, 0x8c}, {&(0x7f00000021c0)=""/104, 0x68}], 0x6}, 0x2}, {{&(0x7f00000022c0)=@l2tp, 0x80, &(0x7f0000003480)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/18, 0x12}, {&(0x7f0000003380)=""/201, 0xc9}], 0x3, &(0x7f00000034c0)=""/139, 0x8b}}, {{&(0x7f0000003580)=@alg, 0x80, &(0x7f00000047c0)=[{&(0x7f0000003600)=""/55, 0x37}, {&(0x7f0000003640)=""/103, 0x67}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/96, 0x60}, {&(0x7f0000004740)=""/111, 0x6f}], 0x5, &(0x7f0000004840)=""/71, 0x47}, 0x4}, {{&(0x7f00000048c0)=@can, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004940)=""/202, 0xca}, {&(0x7f0000004a40)=""/58, 0x3a}, {&(0x7f0000004a80)=""/183, 0xb7}, {&(0x7f0000004b40)=""/205, 0xcd}, {&(0x7f0000004c40)=""/240, 0xf0}], 0x5, &(0x7f0000004dc0)=""/197, 0xc5}, 0xfffffff8}, {{&(0x7f0000004ec0), 0x80, &(0x7f0000005380)=[{&(0x7f0000004f40)=""/16, 0x10}, {&(0x7f0000004f80)=""/81, 0x51}, {&(0x7f0000005000)=""/31, 0x1f}, {&(0x7f0000005040)=""/246, 0xf6}, {&(0x7f0000005140)=""/134, 0x86}, {&(0x7f0000005200)=""/184, 0xb8}, {&(0x7f00000052c0)=""/70, 0x46}, {&(0x7f0000005340)=""/64, 0x40}], 0x8, &(0x7f0000005400)=""/157, 0x9d}, 0x3}], 0x8, 0x1, &(0x7f00000056c0)={0x77359400}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x20044010) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42950}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x18}}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x508f, 0x92}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x3}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4d3, 0x2ac}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}]}]}}}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = accept(r0, &(0x7f00000058c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000005940)=0x80) sendmsg$kcm(r5, &(0x7f0000005bc0)={&(0x7f0000005980)=@phonet={0x23, 0x40, 0x80, 0x4}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005a00)="87ef6e8172bd97c340a5d3b5d9d86d360e7f886975666d3c909f534d327aca04f2487507f58c6e1d4ca902732a6af0e0e9", 0x31}], 0x1, &(0x7f0000005a80)=[{0x38, 0x113, 0x1, "d9c1d558d88e637635054cbabc9f990ace4e37600da7987230f2b8e73afc5f4b54307e04063081"}, {0x108, 0x115, 0x8882, "c0cc46015de606f58a5b248ac167235cd46efceadb26ba734b6f227b09393ff90f7fe5fef72d7fc7058bf95df7c79ec01e883878f19161766b9f2bacc3861c61f91868758e0e08289fbe54de3715f567603a5d6cce1000553c51879060e3cdb494a3a188795c149aa3b27556decb64991e0770ad646add5804ba7ef89a512f826ca5afbd19307caf9d2c8b468f6d8b5e20e56f52b7a2dc5e324a0721a8bbf745a403b47f26261e411a3a0e2ad2f3dfd8b546963d6b6d0fa8582a6780ca89df2427ef67190600e6b7b98630a8b7be2f7f5d47ccce76186176246dcc703858b1ef2044e8b3f8a301b9c631fc053dc2d2997da17206c0"}], 0x140}, 0x4040804) 04:08:21 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @local}}, 0x0, 0x20000000005, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[], 0x1000001bd) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000040)=0xffffffff, 0x4) 04:08:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x3a0, 0x238, 0x238, 0x3a0, 0x238, 0x3, 0x0, {[{{@ipv6={@private1, @private2, [], [], 'veth1_virt_wifi\x00', 'veth0_to_batadv\x00'}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x30, 0x0, [@dev, @private1, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @dev, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @local, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @loopback, @dev]}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @loopback}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c493e4e344674978f0507af63b906e2e5e182d2f0d23ea7a2a478afdb6c0"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) [ 491.808909][T25430] bridge0: port 3(syz_tun) entered blocking state [ 491.840932][T25430] bridge0: port 3(syz_tun) entered disabled state [ 491.873886][T25430] device syz_tun entered promiscuous mode 04:08:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @generic='\t']}, 0x1c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/113, 0x71}], 0x3, &(0x7f0000001480)=""/154, 0x9a}, 0x6}, {{&(0x7f0000001540)=@qipcrtr, 0x80, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/203, 0xcb}], 0x2, &(0x7f00000017c0)=""/233, 0xe9}, 0x2}, {{&(0x7f00000018c0)=@generic, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000001940)=""/251, 0xfb}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/249, 0xf9}], 0x4, &(0x7f0000001c40)=""/253, 0xfd}, 0x694}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001d40)=""/228, 0xe4}, {&(0x7f0000001e40)=""/205, 0xcd}, {&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/140, 0x8c}, {&(0x7f00000021c0)=""/104, 0x68}], 0x6}, 0x2}, {{&(0x7f00000022c0)=@l2tp, 0x80, &(0x7f0000003480)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/18, 0x12}, {&(0x7f0000003380)=""/201, 0xc9}], 0x3, &(0x7f00000034c0)=""/139, 0x8b}}, {{&(0x7f0000003580)=@alg, 0x80, &(0x7f00000047c0)=[{&(0x7f0000003600)=""/55, 0x37}, {&(0x7f0000003640)=""/103, 0x67}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/96, 0x60}, {&(0x7f0000004740)=""/111, 0x6f}], 0x5, &(0x7f0000004840)=""/71, 0x47}, 0x4}, {{&(0x7f00000048c0)=@can, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004940)=""/202, 0xca}, {&(0x7f0000004a40)=""/58, 0x3a}, {&(0x7f0000004a80)=""/183, 0xb7}, {&(0x7f0000004b40)=""/205, 0xcd}, {&(0x7f0000004c40)=""/240, 0xf0}], 0x5, &(0x7f0000004dc0)=""/197, 0xc5}, 0xfffffff8}, {{&(0x7f0000004ec0), 0x80, &(0x7f0000005380)=[{&(0x7f0000004f40)=""/16, 0x10}, {&(0x7f0000004f80)=""/81, 0x51}, {&(0x7f0000005000)=""/31, 0x1f}, {&(0x7f0000005040)=""/246, 0xf6}, {&(0x7f0000005140)=""/134, 0x86}, {&(0x7f0000005200)=""/184, 0xb8}, {&(0x7f00000052c0)=""/70, 0x46}, {&(0x7f0000005340)=""/64, 0x40}], 0x8, &(0x7f0000005400)=""/157, 0x9d}, 0x3}], 0x8, 0x1, &(0x7f00000056c0)={0x77359400}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x20044010) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42950}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x18}}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x508f, 0x92}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x3}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4d3, 0x2ac}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}]}]}}}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = accept(r0, &(0x7f00000058c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000005940)=0x80) sendmsg$kcm(r5, &(0x7f0000005bc0)={&(0x7f0000005980)=@phonet={0x23, 0x40, 0x80, 0x4}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005a00)="87ef6e8172bd97c340a5d3b5d9d86d360e7f886975666d3c909f534d327aca04f2487507f58c6e1d4ca902732a6af0e0e9", 0x31}], 0x1, &(0x7f0000005a80)=[{0x38, 0x113, 0x1, "d9c1d558d88e637635054cbabc9f990ace4e37600da7987230f2b8e73afc5f4b54307e04063081"}, {0x108, 0x115, 0x8882, "c0cc46015de606f58a5b248ac167235cd46efceadb26ba734b6f227b09393ff90f7fe5fef72d7fc7058bf95df7c79ec01e883878f19161766b9f2bacc3861c61f91868758e0e08289fbe54de3715f567603a5d6cce1000553c51879060e3cdb494a3a188795c149aa3b27556decb64991e0770ad646add5804ba7ef89a512f826ca5afbd19307caf9d2c8b468f6d8b5e20e56f52b7a2dc5e324a0721a8bbf745a403b47f26261e411a3a0e2ad2f3dfd8b546963d6b6d0fa8582a6780ca89df2427ef67190600e6b7b98630a8b7be2f7f5d47ccce76186176246dcc703858b1ef2044e8b3f8a301b9c631fc053dc2d2997da17206c0"}], 0x140}, 0x4040804) 04:08:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x3a0, 0x238, 0x238, 0x3a0, 0x238, 0x3, 0x0, {[{{@ipv6={@private1, @private2, [], [], 'veth1_virt_wifi\x00', 'veth0_to_batadv\x00'}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x30, 0x0, [@dev, @private1, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @dev, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @local, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @loopback, @dev]}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @loopback}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c493e4e344674978f0507af63b906e2e5e182d2f0d23ea7a2a478afdb6c0"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 04:08:22 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}, @generic='\t']}, 0x1c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000054c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/255, 0xff}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/113, 0x71}], 0x3, &(0x7f0000001480)=""/154, 0x9a}, 0x6}, {{&(0x7f0000001540)=@qipcrtr, 0x80, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/196, 0xc4}, {&(0x7f00000016c0)=""/203, 0xcb}], 0x2, &(0x7f00000017c0)=""/233, 0xe9}, 0x2}, {{&(0x7f00000018c0)=@generic, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000001940)=""/251, 0xfb}, {&(0x7f0000001a40)=""/155, 0x9b}, {&(0x7f0000001b00)=""/249, 0xf9}], 0x4, &(0x7f0000001c40)=""/253, 0xfd}, 0x694}, {{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000001d40)=""/228, 0xe4}, {&(0x7f0000001e40)=""/205, 0xcd}, {&(0x7f0000001f40)=""/159, 0x9f}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/140, 0x8c}, {&(0x7f00000021c0)=""/104, 0x68}], 0x6}, 0x2}, {{&(0x7f00000022c0)=@l2tp, 0x80, &(0x7f0000003480)=[{&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/18, 0x12}, {&(0x7f0000003380)=""/201, 0xc9}], 0x3, &(0x7f00000034c0)=""/139, 0x8b}}, {{&(0x7f0000003580)=@alg, 0x80, &(0x7f00000047c0)=[{&(0x7f0000003600)=""/55, 0x37}, {&(0x7f0000003640)=""/103, 0x67}, {&(0x7f00000036c0)=""/4096, 0x1000}, {&(0x7f00000046c0)=""/96, 0x60}, {&(0x7f0000004740)=""/111, 0x6f}], 0x5, &(0x7f0000004840)=""/71, 0x47}, 0x4}, {{&(0x7f00000048c0)=@can, 0x80, &(0x7f0000004d40)=[{&(0x7f0000004940)=""/202, 0xca}, {&(0x7f0000004a40)=""/58, 0x3a}, {&(0x7f0000004a80)=""/183, 0xb7}, {&(0x7f0000004b40)=""/205, 0xcd}, {&(0x7f0000004c40)=""/240, 0xf0}], 0x5, &(0x7f0000004dc0)=""/197, 0xc5}, 0xfffffff8}, {{&(0x7f0000004ec0), 0x80, &(0x7f0000005380)=[{&(0x7f0000004f40)=""/16, 0x10}, {&(0x7f0000004f80)=""/81, 0x51}, {&(0x7f0000005000)=""/31, 0x1f}, {&(0x7f0000005040)=""/246, 0xf6}, {&(0x7f0000005140)=""/134, 0x86}, {&(0x7f0000005200)=""/184, 0xb8}, {&(0x7f00000052c0)=""/70, 0x46}, {&(0x7f0000005340)=""/64, 0x40}], 0x8, &(0x7f0000005400)=""/157, 0x9d}, 0x3}], 0x8, 0x1, &(0x7f00000056c0)={0x77359400}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x20044010) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000000000)={'bridge0\x00', @ifru_settings={0x0, 0x0, @fr=0x0}}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0xb8, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42950}, [@IFLA_LINKINFO={0x84, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x74, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x18}}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x7ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x508f, 0x92}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x3}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4d3, 0x2ac}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x10000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}]}]}}}, @IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}]}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = accept(r0, &(0x7f00000058c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000005940)=0x80) sendmsg$kcm(r5, &(0x7f0000005bc0)={&(0x7f0000005980)=@phonet={0x23, 0x40, 0x80, 0x4}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000005a00)="87ef6e8172bd97c340a5d3b5d9d86d360e7f886975666d3c909f534d327aca04f2487507f58c6e1d4ca902732a6af0e0e9", 0x31}], 0x1, &(0x7f0000005a80)=[{0x38, 0x113, 0x1, "d9c1d558d88e637635054cbabc9f990ace4e37600da7987230f2b8e73afc5f4b54307e04063081"}, {0x108, 0x115, 0x8882, "c0cc46015de606f58a5b248ac167235cd46efceadb26ba734b6f227b09393ff90f7fe5fef72d7fc7058bf95df7c79ec01e883878f19161766b9f2bacc3861c61f91868758e0e08289fbe54de3715f567603a5d6cce1000553c51879060e3cdb494a3a188795c149aa3b27556decb64991e0770ad646add5804ba7ef89a512f826ca5afbd19307caf9d2c8b468f6d8b5e20e56f52b7a2dc5e324a0721a8bbf745a403b47f26261e411a3a0e2ad2f3dfd8b546963d6b6d0fa8582a6780ca89df2427ef67190600e6b7b98630a8b7be2f7f5d47ccce76186176246dcc703858b1ef2044e8b3f8a301b9c631fc053dc2d2997da17206c0"}], 0x140}, 0x4040804) 04:08:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x3a0, 0x238, 0x238, 0x3a0, 0x238, 0x3, 0x0, {[{{@ipv6={@private1, @private2, [], [], 'veth1_virt_wifi\x00', 'veth0_to_batadv\x00'}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x30, 0x0, [@dev, @private1, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @dev, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @local, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @loopback, @dev]}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @loopback}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c493e4e344674978f0507af63b906e2e5e182d2f0d23ea7a2a478afdb6c0"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 04:08:22 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000058700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:08:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='tlb_flush\x00', r0}, 0x10) [ 492.455380][T25456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:08:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x470, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x3a0, 0x238, 0x238, 0x3a0, 0x238, 0x3, 0x0, {[{{@ipv6={@private1, @private2, [], [], 'veth1_virt_wifi\x00', 'veth0_to_batadv\x00'}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x30, 0x0, [@dev, @private1, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @dev, @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @local, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @loopback, @dev]}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @loopback}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c493e4e344674978f0507af63b906e2e5e182d2f0d23ea7a2a478afdb6c0"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 04:08:22 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000001500850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x90, &(0x7f00000002c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='signal_generate\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socket$xdp(0x2c, 0x3, 0x0) [ 492.600414][T25456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:08:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='tlb_flush\x00', r0}, 0x10) 04:08:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x5, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 04:08:22 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000058700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:08:22 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000058700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:08:22 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000001500850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x90, &(0x7f00000002c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='signal_generate\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socket$xdp(0x2c, 0x3, 0x0) 04:08:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x5, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 04:08:22 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000001500850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x90, &(0x7f00000002c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='signal_generate\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socket$xdp(0x2c, 0x3, 0x0) 04:08:22 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='tlb_flush\x00', r0}, 0x10) [ 493.077505][T25487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:08:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x5, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) [ 493.213276][T25489] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:08:23 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='tlb_flush\x00', r0}, 0x10) 04:08:23 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000001500850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x90, &(0x7f00000002c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='signal_generate\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socket$xdp(0x2c, 0x3, 0x0) 04:08:23 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000001500850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x90, &(0x7f00000002c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='signal_generate\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socket$xdp(0x2c, 0x3, 0x0) 04:08:23 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000058700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:08:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x5, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48) 04:08:23 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000058700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:08:23 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000001500850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x90, &(0x7f00000002c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='signal_generate\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socket$xdp(0x2c, 0x3, 0x0) [ 493.645124][T25533] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:08:23 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)='/proc/4\x00\x00s/sync_\x00le\xf44\a\x00 \x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) [ 493.760779][T25543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:08:23 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000001500850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x90, &(0x7f00000002c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='signal_generate\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socket$xdp(0x2c, 0x3, 0x0) 04:08:23 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000058700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:08:23 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000001500850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x90, &(0x7f00000002c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='signal_generate\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socket$xdp(0x2c, 0x3, 0x0) 04:08:23 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000058700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:08:23 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000001500850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x90, &(0x7f00000002c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='signal_generate\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socket$xdp(0x2c, 0x3, 0x0) 04:08:23 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)='/proc/4\x00\x00s/sync_\x00le\xf44\a\x00 \x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) 04:08:24 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)='/proc/4\x00\x00s/sync_\x00le\xf44\a\x00 \x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) 04:08:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0) 04:08:24 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)='/proc/4\x00\x00s/sync_\x00le\xf44\a\x00 \x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x1ff) 04:08:24 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:08:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x15}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 04:08:24 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000001500850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x90, &(0x7f00000002c0)=""/144, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='signal_generate\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x2) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) socket$xdp(0x2c, 0x3, 0x0) 04:08:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0) 04:08:24 executing program 0: getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 04:08:24 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 04:08:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x15}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) [ 494.801050][T25627] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 04:08:24 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) [ 494.913516][T25627] 8021q: adding VLAN 0 to HW filter on device bond1 [ 494.994030][T25630] bond1: (slave ip6gretap1): making interface the new active one [ 495.024430][T25630] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link 04:08:24 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:08:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0) [ 495.048313][T13473] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 495.066995][T25627] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 04:08:24 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:08:24 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x15}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 04:08:24 executing program 0: getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 04:08:25 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:08:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}}, 0x0) [ 495.341889][T25689] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 04:08:25 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:08:25 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x15}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 04:08:25 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@local, @private0, 0x0, 0x0, 0xd1}, {0x0, @remote}, @ah_ip4_spec={@dev, @remote}, {0x0, @broadcast}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000000)) [ 495.543905][T25689] 8021q: adding VLAN 0 to HW filter on device bond2 04:08:25 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) [ 495.593366][T25691] bond2: (slave ip6gretap2): making interface the new active one [ 495.654365][T25691] bond2: (slave ip6gretap2): Enslaving as an active interface with an up link [ 495.707113][T13473] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready 04:08:25 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:08:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000505d25a80648c63940d0224fc6010000240", 0x18}], 0x1}, 0x0) 04:08:25 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@local, @private0, 0x0, 0x0, 0xd1}, {0x0, @remote}, @ah_ip4_spec={@dev, @remote}, {0x0, @broadcast}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000000)) 04:08:25 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:08:25 executing program 0: getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 04:08:25 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 04:08:25 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000505d25a80648c63940d0224fc6010000240", 0x18}], 0x1}, 0x0) [ 496.101396][T25749] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 04:08:25 executing program 4: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@local, @private0, 0x0, 0x0, 0xd1}, {0x0, @remote}, @ah_ip4_spec={@dev, @remote}, {0x0, @broadcast}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000000)) 04:08:26 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x1) setsockopt(r0, 0xff, 0x0, 0x0, 0x0) 04:08:26 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@local, @private0, 0x0, 0x0, 0xd1}, {0x0, @remote}, @ah_ip4_spec={@dev, @remote}, {0x0, @broadcast}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000000)) 04:08:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x14, r1, 0xe6f4b84336acd307, 0x0, 0x0, {{0x11}, {@void, @void, @void}}}, 0x14}}, 0x0) [ 496.320922][T25749] 8021q: adding VLAN 0 to HW filter on device bond3 04:08:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000505d25a80648c63940d0224fc6010000240", 0x18}], 0x1}, 0x0) 04:08:26 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x1) setsockopt(r0, 0xff, 0x0, 0x0, 0x0) [ 496.463700][T25753] bond3: (slave ip6gretap3): making interface the new active one 04:08:26 executing program 4: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@local, @private0, 0x0, 0x0, 0xd1}, {0x0, @remote}, @ah_ip4_spec={@dev, @remote}, {0x0, @broadcast}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000000)) 04:08:26 executing program 2: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@local, @private0, 0x0, 0x0, 0xd1}, {0x0, @remote}, @ah_ip4_spec={@dev, @remote}, {0x0, @broadcast}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000000)) [ 496.539350][T25753] bond3: (slave ip6gretap3): Enslaving as an active interface with an up link 04:08:26 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000505d25a80648c63940d0224fc6010000240", 0x18}], 0x1}, 0x0) [ 496.619142][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready 04:08:26 executing program 0: getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}}, 0x0) 04:08:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x14, r1, 0xe6f4b84336acd307, 0x0, 0x0, {{0x11}, {@void, @void, @void}}}, 0x14}}, 0x0) 04:08:26 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x1) setsockopt(r0, 0xff, 0x0, 0x0, 0x0) 04:08:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:08:26 executing program 4: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'lo\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @sctp_ip6_spec={@local, @private0, 0x0, 0x0, 0xd1}, {0x0, @remote}, @ah_ip4_spec={@dev, @remote}, {0x0, @broadcast}}}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0c0583b, &(0x7f0000000000)) 04:08:26 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000003780)={'gre0\x00', &(0x7f0000003700)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfe, 0x2f, 0x0, @remote}}}}) accept(r0, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x18, r2, 0x2edf9a676ccb5fd9, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) 04:08:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x14, r1, 0xe6f4b84336acd307, 0x0, 0x0, {{0x11}, {@void, @void, @void}}}, 0x14}}, 0x0) [ 496.953975][T25818] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 04:08:26 executing program 1: r0 = socket$inet(0x2, 0x80003, 0x1) setsockopt(r0, 0xff, 0x0, 0x0, 0x0) 04:08:26 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x40}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) 04:08:26 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x1, 0x1000}, 0x40) 04:08:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 497.165660][T25818] 8021q: adding VLAN 0 to HW filter on device bond4 04:08:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x1, 0x1000}, 0x40) [ 497.267999][T25822] bond4: (slave ip6gretap4): making interface the new active one [ 497.360577][T25822] bond4: (slave ip6gretap4): Enslaving as an active interface with an up link [ 497.401967][ T9716] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready 04:08:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x1, 0x1000}, 0x40) 04:08:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x14, r1, 0xe6f4b84336acd307, 0x0, 0x0, {{0x11}, {@void, @void, @void}}}, 0x14}}, 0x0) 04:08:27 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x40}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) 04:08:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:08:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000003780)={'gre0\x00', &(0x7f0000003700)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfe, 0x2f, 0x0, @remote}}}}) accept(r0, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x18, r2, 0x2edf9a676ccb5fd9, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) 04:08:27 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x40}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) 04:08:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000003780)={'gre0\x00', &(0x7f0000003700)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfe, 0x2f, 0x0, @remote}}}}) accept(r0, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x18, r2, 0x2edf9a676ccb5fd9, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) 04:08:27 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) 04:08:27 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x40}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) 04:08:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:08:27 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x1, 0x1000}, 0x40) 04:08:27 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x40}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) 04:08:27 executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x40}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) 04:08:27 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) 04:08:27 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000003780)={'gre0\x00', &(0x7f0000003700)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x4, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfe, 0x2f, 0x0, @remote}}}}) accept(r0, 0x0, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x18, r2, 0x2edf9a676ccb5fd9, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44004) 04:08:27 executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x40}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2}, 0x10, 0x0}, 0x0) 04:08:27 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f320002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 04:08:27 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000507", @ANYBLOB, @ANYRES32=r2], 0x3c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) r4 = socket(0x10, 0x3, 0x0) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) sendfile(r1, r3, 0x0, 0x0) [ 498.313848][T25915] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 04:08:28 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000400)={0x28, r5, 0x203, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) 04:08:28 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) 04:08:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 498.354406][T25915] __nla_validate_parse: 2 callbacks suppressed [ 498.354422][T25915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:08:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) [ 498.446052][T25918] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 04:08:28 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f320002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 498.535889][T25926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 04:08:28 executing program 3: r0 = socket$inet6(0xa, 0x5, 0x0) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) [ 498.789631][T25926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 499.039660][T25969] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 499.063595][T25969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.084501][T25926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 04:08:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) [ 499.153625][T25926] bond2 (uninitialized): Released all slaves 04:08:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000000000463b", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:08:29 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f320002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) 04:08:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 499.438907][T25986] netlink: 'syz-executor.1': attribute type 5 has an invalid length. 04:08:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) [ 499.485126][T25986] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 499.513601][T25987] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 04:08:29 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000400)={0x28, r5, 0x203, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) 04:08:29 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000074774270600fd5721d41001a381", @ANYRES32=0x0, @ANYBLOB="7f320002810300001c0012000b0001006d616373656300e10b00020005000d00000300000a0005"], 0x50}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x0) [ 499.621186][T25990] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 04:08:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) [ 499.811861][T25990] 8021q: adding VLAN 0 to HW filter on device bond2 04:08:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) [ 500.018040][T25991] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 500.047554][T26046] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 500.070786][T26046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 04:08:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) 04:08:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000000000463b", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:08:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 04:08:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) 04:08:30 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) [ 500.614891][T26077] 8021q: adding VLAN 0 to HW filter on device bond3 04:08:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000000000463b", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) 04:08:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000400)={0x28, r5, 0x203, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) [ 501.052494][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.058851][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 04:08:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) 04:08:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 04:08:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000004200)={0x0, 0x0, &(0x7f00000041c0)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000000000000000463b", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x3c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x7, 0x5}]}}]}, 0x3c}}, 0x0) [ 501.641230][T26144] 8021q: adding VLAN 0 to HW filter on device bond4 04:08:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) 04:08:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) 04:08:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) 04:08:32 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) 04:08:32 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000400)={0x28, r5, 0x203, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) 04:08:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) 04:08:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) 04:08:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) 04:08:33 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) 04:08:33 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) 04:08:34 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000400)={0x28, r5, 0x203, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) 04:08:34 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 04:08:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 505.443374][T26254] __nla_validate_parse: 5 callbacks suppressed [ 505.443393][T26254] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:08:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) [ 505.677822][T26254] 8021q: adding VLAN 0 to HW filter on device bond5 04:08:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r3, 0x0, 0xf03b0000) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x400920) [ 505.810049][T26292] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 505.891941][T26292] 8021q: adding VLAN 0 to HW filter on device bond13 04:08:35 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ffffffff000000000004000000180001c0140002007665746830"], 0x2c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000030000004) 04:08:35 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000400)={0x28, r5, 0x203, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) 04:08:35 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 506.339455][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 506.339471][ T26] audit: type=1804 audit(1637899716.106:175): pid=26340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/498/cgroup.controllers" dev="sda1" ino=14978 res=1 errno=0 [ 506.349693][T26345] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:08:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 506.605791][T26345] 8021q: adding VLAN 0 to HW filter on device bond6 [ 506.914847][T26377] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 507.030480][ T26] audit: type=1804 audit(1637899716.797:176): pid=26344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/498/cgroup.controllers" dev="sda1" ino=14978 res=1 errno=0 04:08:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ffffffff000000000004000000180001c0140002007665746830"], 0x2c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000030000004) [ 507.149675][T26377] 8021q: adding VLAN 0 to HW filter on device bond14 04:08:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) 04:08:37 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r1, 0x0, 0x800000000000c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000400)={0x28, r5, 0x203, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r5, 0x1}, 0x14}}, 0x0) 04:08:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ffffffff000000000004000000180001c0140002007665746830"], 0x2c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000030000004) [ 507.532926][T26432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:08:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) 04:08:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}]}, 0x3c}}, 0x0) [ 507.698461][ T26] audit: type=1804 audit(1637899717.467:177): pid=26430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/499/cgroup.controllers" dev="sda1" ino=13997 res=1 errno=0 [ 507.744566][T26432] 8021q: adding VLAN 0 to HW filter on device bond7 [ 507.820707][ T26] audit: type=1804 audit(1637899717.597:178): pid=26460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir457608659/syzkaller.DM79gG/112/cgroup.controllers" dev="sda1" ino=13991 res=1 errno=0 [ 507.998187][T26478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 04:08:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) [ 508.239612][T26478] 8021q: adding VLAN 0 to HW filter on device bond15 04:08:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) [ 508.351128][T26430] syz-executor.3: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 508.505465][T26430] CPU: 0 PID: 26430 Comm: syz-executor.3 Not tainted 5.16.0-rc1-syzkaller #0 [ 508.514266][T26430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 508.524335][T26430] Call Trace: [ 508.527623][T26430] [ 508.530564][T26430] dump_stack_lvl+0xcd/0x134 [ 508.535314][T26430] warn_alloc.cold+0x87/0x17a [ 508.540044][T26430] ? zone_watermark_ok_safe+0x290/0x290 [ 508.545674][T26430] ? __kmalloc_node+0x62/0x390 [ 508.550536][T26430] ? __vmalloc_node_range+0x574/0xab0 [ 508.555964][T26430] __vmalloc_node_range+0x883/0xab0 [ 508.561194][T26430] ? vfree_atomic+0xe0/0xe0 [ 508.565721][T26430] ? netlink_sendmsg+0x5f0/0xda0 [ 508.570809][T26430] vmalloc+0x67/0x80 [ 508.574717][T26430] ? netlink_sendmsg+0x5f0/0xda0 [ 508.579677][T26430] netlink_sendmsg+0x5f0/0xda0 [ 508.584471][T26430] ? netlink_unicast+0x7d0/0x7d0 [ 508.589429][T26430] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 508.595494][T26430] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 508.601829][T26430] ? netlink_unicast+0x7d0/0x7d0 [ 508.606791][T26430] sock_sendmsg+0xcf/0x120 [ 508.611278][T26430] sock_no_sendpage+0xf6/0x140 [ 508.616096][T26430] ? sock_no_shutdown+0x10/0x10 [ 508.620979][T26430] ? find_held_lock+0x2d/0x110 [ 508.625769][T26430] kernel_sendpage.part.0+0x1a0/0x340 [ 508.631173][T26430] sock_sendpage+0xe5/0x140 [ 508.635793][T26430] ? __sock_recv_ts_and_drops+0x430/0x430 [ 508.641529][T26430] pipe_to_sendpage+0x2ad/0x380 [ 508.646500][T26430] ? propagate_umount+0x19f0/0x19f0 [ 508.651722][T26430] ? __put_page+0x13d/0x470 [ 508.656321][T26430] __splice_from_pipe+0x43e/0x8a0 [ 508.661370][T26430] ? propagate_umount+0x19f0/0x19f0 [ 508.666591][T26430] generic_splice_sendpage+0xd4/0x140 [ 508.672593][T26430] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 508.677734][T26430] ? security_file_permission+0xab/0xd0 [ 508.683363][T26430] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 508.688497][T26430] direct_splice_actor+0x110/0x180 [ 508.693630][T26430] splice_direct_to_actor+0x34b/0x8c0 [ 508.699026][T26430] ? generic_file_splice_read+0x6d0/0x6d0 [ 508.705209][T26430] ? do_splice_to+0x250/0x250 [ 508.709911][T26430] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 508.716177][T26430] ? security_file_permission+0xab/0xd0 [ 508.721756][T26430] do_splice_direct+0x1b3/0x280 [ 508.726633][T26430] ? splice_direct_to_actor+0x8c0/0x8c0 [ 508.732210][T26430] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 508.738479][T26430] ? security_file_permission+0xab/0xd0 [ 508.744054][T26430] do_sendfile+0xaf2/0x1250 [ 508.748687][T26430] ? do_pwritev+0x270/0x270 [ 508.753210][T26430] ? __context_tracking_exit+0xb8/0xe0 [ 508.758783][T26430] ? lock_downgrade+0x6e0/0x6e0 [ 508.763677][T26430] ? lock_downgrade+0x6e0/0x6e0 [ 508.768551][T26430] __x64_sys_sendfile64+0x1cc/0x210 [ 508.773770][T26430] ? __ia32_sys_sendfile+0x220/0x220 [ 508.779072][T26430] ? syscall_enter_from_user_mode+0x21/0x70 [ 508.784989][T26430] do_syscall_64+0x35/0xb0 [ 508.789424][T26430] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 508.795373][T26430] RIP: 0033:0x7fc1ed086ae9 [ 508.799791][T26430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 508.819396][T26430] RSP: 002b:00007fc1ea5fc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 508.827806][T26430] RAX: ffffffffffffffda RBX: 00007fc1ed199f60 RCX: 00007fc1ed086ae9 [ 508.835769][T26430] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 508.843732][T26430] RBP: 00007fc1ed0e0f6d R08: 0000000000000000 R09: 0000000000000000 [ 508.851692][T26430] R10: 0100000030000004 R11: 0000000000000246 R12: 0000000000000000 [ 508.859654][T26430] R13: 00007ffe461cefaf R14: 00007fc1ea5fc300 R15: 0000000000022000 [ 508.867634][T26430] 04:08:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) 04:08:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ffffffff000000000004000000180001c0140002007665746830"], 0x2c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000030000004) 04:08:38 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private0}, @in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 04:08:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) [ 509.237736][ T26] audit: type=1804 audit(1637899719.007:179): pid=26531 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir457608659/syzkaller.DM79gG/113/cgroup.controllers" dev="sda1" ino=13990 res=1 errno=0 [ 509.316900][T26430] Mem-Info: [ 509.324752][T26430] active_anon:280 inactive_anon:46700 isolated_anon:0 [ 509.324752][T26430] active_file:6366 inactive_file:80844 isolated_file:0 [ 509.324752][T26430] unevictable:768 dirty:754 writeback:0 [ 509.324752][T26430] slab_reclaimable:22271 slab_unreclaimable:110562 [ 509.324752][T26430] mapped:61031 shmem:6276 pagetables:1084 bounce:0 [ 509.324752][T26430] kernel_misc_reclaimable:0 [ 509.324752][T26430] free:1298518 free_pcp:11088 free_cma:0 [ 509.393169][T26430] Node 0 active_anon:1120kB inactive_anon:185884kB active_file:25348kB inactive_file:323376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:244124kB dirty:2712kB writeback:0kB shmem:22652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB kernel_stack:11356kB pagetables:4332kB all_unreclaimable? no [ 509.426665][T26430] Node 1 active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 509.468448][T26430] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.544081][T26430] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 509.551253][T26430] Node 0 DMA32 free:1227520kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:1120kB inactive_anon:185844kB active_file:25248kB inactive_file:323444kB unevictable:1536kB writepending:2476kB present:3129332kB managed:2716744kB mlocked:0kB bounce:0kB free_pcp:43824kB local_pcp:21996kB free_cma:0kB [ 509.626759][T26430] lowmem_reserve[]: 0 0 0 0 0 [ 509.632187][T26430] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.675970][T26430] lowmem_reserve[]: 0 0 0 0 0 [ 509.697289][T26430] Node 1 Normal free:3949848kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:808kB local_pcp:0kB free_cma:0kB [ 509.759888][T26430] lowmem_reserve[]: 0 0 0 0 0 [ 509.765236][T26430] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 509.780022][T26430] Node 0 DMA32: 2499*4kB (UM) 398*8kB (UME) 465*16kB (UME) 347*32kB (UME) 306*64kB (UME) 131*128kB (UME) 62*256kB (UM) 13*512kB (UM) 3*1024kB (UME) 1*2048kB (U) 277*4096kB (UM) = 1230316kB [ 509.808302][T26430] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 509.828661][T26430] Node 1 Normal: 140*4kB (UME) 59*8kB (UME) 45*16kB (UME) 198*32kB (UME) 82*64kB (UE) 34*128kB (UME) 18*256kB (U) 3*512kB (U) 0*1024kB 3*2048kB (UM) 957*4096kB (M) = 3949848kB [ 509.847972][T26430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.861957][T26430] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 509.885948][T26430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.897722][T26430] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB 04:08:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ffffffff000000000004000000180001c0140002007665746830"], 0x2c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000030000004) 04:08:39 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) 04:08:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private0}, @in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 04:08:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) 04:08:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ffffffff000000000004000000180001c0140002007665746830"], 0x2c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000030000004) [ 509.908064][T26430] 49914 total pagecache pages [ 509.913659][T26430] 0 pages in swap cache [ 509.917866][T26430] Swap cache stats: add 0, delete 0, find 0/0 [ 509.924430][T26430] Free swap = 0kB [ 509.928145][T26430] Total swap = 0kB [ 509.932761][T26430] 2097051 pages RAM [ 509.936659][T26430] 0 pages HighMem/MovableOnly [ 509.944575][T26430] 384520 pages reserved [ 509.948784][T26430] 0 pages cma reserved 04:08:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private0}, @in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 04:08:39 executing program 2: unshare(0x4000400) bpf$ITER_CREATE(0x1d, 0x0, 0x0) 04:08:39 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x40000000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) close(r1) [ 510.238710][ T26] audit: type=1804 audit(1637899720.007:180): pid=26551 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir457608659/syzkaller.DM79gG/114/cgroup.controllers" dev="sda1" ino=13994 res=1 errno=0 [ 510.401441][ T26] audit: type=1804 audit(1637899720.067:181): pid=26554 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/500/cgroup.controllers" dev="sda1" ino=14006 res=1 errno=0 04:08:40 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x0, 0x0, @private0}, @in6={0x2, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in6=@local={0xfe, 0x80, '\x00', 0xffffffffffffffff}}}]}, 0xe0}}, 0x0) 04:08:40 executing program 2: unshare(0x4000400) bpf$ITER_CREATE(0x1d, 0x0, 0x0) 04:08:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) [ 510.937342][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:08:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ffffffff000000000004000000180001c0140002007665746830"], 0x2c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x100000030000004) 04:08:40 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:40 executing program 2: unshare(0x4000400) bpf$ITER_CREATE(0x1d, 0x0, 0x0) 04:08:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x0) [ 511.183555][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:08:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 04:08:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x40000000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) close(r1) [ 511.287694][ T26] audit: type=1804 audit(1637899721.057:182): pid=26587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir379715787/syzkaller.jO2jBL/501/cgroup.controllers" dev="sda1" ino=13994 res=1 errno=0 04:08:41 executing program 2: unshare(0x4000400) bpf$ITER_CREATE(0x1d, 0x0, 0x0) 04:08:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x0) [ 511.528241][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:08:41 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x40000000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) close(r1) 04:08:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 04:08:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x0) 04:08:41 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x40000000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) close(r1) [ 512.015709][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:08:42 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 04:08:42 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}}, 0x0) [ 512.568975][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:08:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x40000000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) close(r1) 04:08:42 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 04:08:42 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 513.055491][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:08:42 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x40000000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) close(r1) 04:08:43 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x40000000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) close(r1) 04:08:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) [ 513.735153][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:08:43 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:43 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 04:08:43 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x40000000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) close(r1) 04:08:44 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 514.337470][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 04:08:44 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x40000000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) close(r1) 04:08:44 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, 0x0, 0x0) listen(r4, 0x8) ioctl$BTRFS_IOC_BALANCE(r4, 0x5000940c, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x14e24}, 0x1c) recvmmsg(r1, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x40000000}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2, 0x3000300}], 0x1, 0x0, 0x0, 0x0) close(r1) 04:08:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:45 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:45 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:45 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 04:08:46 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:46 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000002"], 0x20000608}}, 0x0) close(r1) 04:08:46 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 04:08:46 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:46 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000002"], 0x20000608}}, 0x0) close(r1) 04:08:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:46 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 04:08:46 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 04:08:47 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000002"], 0x20000608}}, 0x0) close(r1) 04:08:47 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 04:08:47 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 04:08:47 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000002"], 0x20000608}}, 0x0) close(r1) 04:08:47 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:47 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214ffffffffff0900000000000000000000005300080008000d000000", 0x24) 04:08:47 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a503d39c2bd6a40f03c8aa024d00000000ffffffffffff7f261e21ccf67e1d0000e565aa9a9d32c7627ffe7a54cdbd77b300", 0x2b}, 0x60) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) accept(r0, 0x0, 0x0) 04:08:48 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:48 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214ffffffffff0900000000000000000000005300080008000d000000", 0x24) 04:08:48 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a26657116764b5d41ac062864b5171f1b4c876bef4b4d6057d89a55c4c"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newsa={0x138, 0x10, 0x521, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2}, {@in=@remote, 0x0, 0x6c}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) splice(r1, &(0x7f0000000180)=0x7f, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0x2, 0x5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0xf8, 0x0, 0xf0, 0x0, 0xf0, 0x1d8, 0x1f8, 0x1f8, 0x1d8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1=0xe000a500, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8f0, 0xffffffff, 0x80, 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000680)=@updsa={0xf0, 0x1a, 0x0, 0x70bd2a, 0x25dfdbfe, {{@in6=@mcast2, @in=@private=0xa010102, 0x4e21, 0x4, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x2b}, {@in6=@empty, 0x4d3, 0x6c}, @in6=@local, {0x9, 0x0, 0x5, 0x401, 0x6, 0x3, 0x7, 0x9}, {0x4, 0x6, 0x9, 0x9}, {0x1, 0xff, 0x1f}, 0x70bd2d, 0x3504, 0x2, 0x4, 0x1f, 0x52}}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0xc080) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'tunl0\x00', r4, 0x40, 0x7800, 0x8, 0x4, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@generic={0x44, 0x9, "2a45a3280f10e1"}, @generic={0x44, 0x4, '2{'}, @noop, @cipso={0x86, 0x11, 0x0, [{0x2, 0x8, "3b038f486893"}, {0x6, 0x3, "b2"}]}]}}}}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r7, 0x0, 0xf03b0000) sendfile(r6, r5, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:48 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000020850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 04:08:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 04:08:48 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214ffffffffff0900000000000000000000005300080008000d000000", 0x24) 04:08:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 04:08:48 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000020850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 04:08:48 executing program 2: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214ffffffffff0900000000000000000000005300080008000d000000", 0x24) 04:08:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 04:08:49 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) 04:08:49 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000020850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 04:08:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) 04:08:49 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) 04:08:49 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000020850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) 04:08:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 04:08:49 executing program 1: unshare(0x6c060080) mmap(&(0x7f0000461000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c7}]]}, 0x30}}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) recvfrom$inet6(r0, &(0x7f0000000080)=""/92, 0x5c, 0x2001, &(0x7f0000000100)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9c5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x800}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 04:08:49 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 04:08:49 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) 04:08:49 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 04:08:49 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 04:08:50 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x87, 0x0, 0x700) 04:08:50 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80) 04:08:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 04:08:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 04:08:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 04:08:50 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x87, 0x0, 0x700) 04:08:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@dev}, {@in6=@empty, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1e, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x158}}, 0x0) 04:08:50 executing program 1: unshare(0x6c060080) mmap(&(0x7f0000461000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c7}]]}, 0x30}}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) recvfrom$inet6(r0, &(0x7f0000000080)=""/92, 0x5c, 0x2001, &(0x7f0000000100)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9c5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x800}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 04:08:50 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 04:08:50 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 04:08:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@dev}, {@in6=@empty, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1e, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x158}}, 0x0) 04:08:50 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x87, 0x0, 0x700) 04:08:50 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 04:08:51 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x87, 0x0, 0x700) 04:08:51 executing program 5: unshare(0x6c060080) mmap(&(0x7f0000461000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c7}]]}, 0x30}}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) recvfrom$inet6(r0, &(0x7f0000000080)=""/92, 0x5c, 0x2001, &(0x7f0000000100)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9c5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x800}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 04:08:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@dev}, {@in6=@empty, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1e, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x158}}, 0x0) 04:08:51 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 04:08:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 04:08:51 executing program 0: setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="29060000", @ANYRES16=0x0, @ANYBLOB="000000000000000000003e0000000800010070"], 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601901fdb59cce59ba2600100e91705"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 521.741101][ T26] audit: type=1804 audit(1637899731.518:183): pid=26937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir149024756/syzkaller.DbPSBm/507/cgroup.controllers" dev="sda1" ino=14009 res=1 errno=0 04:08:51 executing program 1: unshare(0x6c060080) mmap(&(0x7f0000461000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c7}]]}, 0x30}}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) recvfrom$inet6(r0, &(0x7f0000000080)=""/92, 0x5c, 0x2001, &(0x7f0000000100)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9c5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x800}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 04:08:51 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101601, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)='~', 0x1}], 0x1) 04:08:51 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0xfec0, 0x0, 0x0, 0x326}, 0x9c) 04:08:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@dev}, {@in6=@empty, 0x0, 0x33}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@replay_esn_val={0x1e, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}}, @algo_auth={0x48, 0x1, {{'md5\x00'}}}]}, 0x158}}, 0x0) 04:08:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x14, r1, 0x701, 0x0, 0x0, {{0x5}, {@void, @void}}}, 0x14}}, 0x0) 04:08:52 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000950000000000000000010000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0xd, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x61, 0x8, 0x9, 0x3f, 0xfffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0xfffffffe}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map={0x18, 0xa, 0x1, 0x0, r1}], &(0x7f0000000340)='GPL\x00', 0x1800, 0xfa, &(0x7f0000000380)=""/250, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0x7, 0x81}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x3, 0x4b4c, {{0xd, 0x4, 0x0, 0xd, 0x34, 0x0, 0x0, 0x1, 0x4, 0x0, @multicast1, @local, {[@lsrr={0x83, 0xf, 0xab, [@multicast2, @multicast1, @empty]}, @generic={0x82, 0x11, "aaec341cec58e3ed91f4330aa0598b"}]}}}}}) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8, 0x7ff, 0x7d43, 0x8, 0x825, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d4, &(0x7f0000000140)={0x4, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:52 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) listen(r0, 0x0) listen(r0, 0x0) 04:08:52 executing program 5: unshare(0x6c060080) mmap(&(0x7f0000461000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c7}]]}, 0x30}}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) recvfrom$inet6(r0, &(0x7f0000000080)=""/92, 0x5c, 0x2001, &(0x7f0000000100)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9c5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x800}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 04:08:52 executing program 4: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000080)) 04:08:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101601, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)='~', 0x1}], 0x1) 04:08:52 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) listen(r0, 0x0) listen(r0, 0x0) 04:08:52 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101601, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)='~', 0x1}], 0x1) 04:08:53 executing program 1: unshare(0x6c060080) mmap(&(0x7f0000461000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c7}]]}, 0x30}}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) recvfrom$inet6(r0, &(0x7f0000000080)=""/92, 0x5c, 0x2001, &(0x7f0000000100)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9c5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x800}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 04:08:53 executing program 4: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000080)) 04:08:53 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) listen(r0, 0x0) listen(r0, 0x0) 04:08:53 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101601, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)='~', 0x1}], 0x1) 04:08:53 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) listen(r0, 0x0) listen(r0, 0x0) 04:08:53 executing program 4: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000080)) 04:08:53 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000950000000000000000010000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0xd, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x61, 0x8, 0x9, 0x3f, 0xfffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0xfffffffe}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map={0x18, 0xa, 0x1, 0x0, r1}], &(0x7f0000000340)='GPL\x00', 0x1800, 0xfa, &(0x7f0000000380)=""/250, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0x7, 0x81}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x3, 0x4b4c, {{0xd, 0x4, 0x0, 0xd, 0x34, 0x0, 0x0, 0x1, 0x4, 0x0, @multicast1, @local, {[@lsrr={0x83, 0xf, 0xab, [@multicast2, @multicast1, @empty]}, @generic={0x82, 0x11, "aaec341cec58e3ed91f4330aa0598b"}]}}}}}) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8, 0x7ff, 0x7d43, 0x8, 0x825, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d4, &(0x7f0000000140)={0x4, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:56 executing program 5: unshare(0x6c060080) mmap(&(0x7f0000461000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc0}}, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000d80)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c7}]]}, 0x30}}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) recvfrom$inet6(r0, &(0x7f0000000080)=""/92, 0x5c, 0x2001, &(0x7f0000000100)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9c5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x800}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 04:08:56 executing program 4: r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) getsockname(r0, 0x0, &(0x7f0000000080)) 04:08:56 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000950000000000000000010000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0xd, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x61, 0x8, 0x9, 0x3f, 0xfffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0xfffffffe}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map={0x18, 0xa, 0x1, 0x0, r1}], &(0x7f0000000340)='GPL\x00', 0x1800, 0xfa, &(0x7f0000000380)=""/250, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0x7, 0x81}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x3, 0x4b4c, {{0xd, 0x4, 0x0, 0xd, 0x34, 0x0, 0x0, 0x1, 0x4, 0x0, @multicast1, @local, {[@lsrr={0x83, 0xf, 0xab, [@multicast2, @multicast1, @empty]}, @generic={0x82, 0x11, "aaec341cec58e3ed91f4330aa0598b"}]}}}}}) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8, 0x7ff, 0x7d43, 0x8, 0x825, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d4, &(0x7f0000000140)={0x4, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:56 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101601, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)='~', 0x1}], 0x1) 04:08:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{}, {}, {}, {}, {}, {}], "336b4e1f91395acc"}}]}, 0x34}}, 0x0) 04:08:56 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000950000000000000000010000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0xd, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x61, 0x8, 0x9, 0x3f, 0xfffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0xfffffffe}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map={0x18, 0xa, 0x1, 0x0, r1}], &(0x7f0000000340)='GPL\x00', 0x1800, 0xfa, &(0x7f0000000380)=""/250, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0x7, 0x81}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x3, 0x4b4c, {{0xd, 0x4, 0x0, 0xd, 0x34, 0x0, 0x0, 0x1, 0x4, 0x0, @multicast1, @local, {[@lsrr={0x83, 0xf, 0xab, [@multicast2, @multicast1, @empty]}, @generic={0x82, 0x11, "aaec341cec58e3ed91f4330aa0598b"}]}}}}}) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8, 0x7ff, 0x7d43, 0x8, 0x825, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d4, &(0x7f0000000140)={0x4, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:56 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001840)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) 04:08:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{}, {}, {}, {}, {}, {}], "336b4e1f91395acc"}}]}, 0x34}}, 0x0) 04:08:56 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101601, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)='~', 0x1}], 0x1) [ 526.842525][T27180] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:08:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{}, {}, {}, {}, {}, {}], "336b4e1f91395acc"}}]}, 0x34}}, 0x0) 04:08:56 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001840)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) [ 527.255499][T27195] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:08:57 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x101601, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)='~', 0x1}], 0x1) 04:08:57 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001840)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) 04:08:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{}, {}, {}, {}, {}, {}], "336b4e1f91395acc"}}]}, 0x34}}, 0x0) 04:08:57 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000950000000000000000010000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0xd, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x61, 0x8, 0x9, 0x3f, 0xfffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0xfffffffe}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map={0x18, 0xa, 0x1, 0x0, r1}], &(0x7f0000000340)='GPL\x00', 0x1800, 0xfa, &(0x7f0000000380)=""/250, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0x7, 0x81}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x3, 0x4b4c, {{0xd, 0x4, 0x0, 0xd, 0x34, 0x0, 0x0, 0x1, 0x4, 0x0, @multicast1, @local, {[@lsrr={0x83, 0xf, 0xab, [@multicast2, @multicast1, @empty]}, @generic={0x82, 0x11, "aaec341cec58e3ed91f4330aa0598b"}]}}}}}) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8, 0x7ff, 0x7d43, 0x8, 0x825, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d4, &(0x7f0000000140)={0x4, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 04:08:57 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000950000000000000000010000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0xd, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x61, 0x8, 0x9, 0x3f, 0xfffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0xfffffffe}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map={0x18, 0xa, 0x1, 0x0, r1}], &(0x7f0000000340)='GPL\x00', 0x1800, 0xfa, &(0x7f0000000380)=""/250, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0x7, 0x81}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x3, 0x4b4c, {{0xd, 0x4, 0x0, 0xd, 0x34, 0x0, 0x0, 0x1, 0x4, 0x0, @multicast1, @local, {[@lsrr={0x83, 0xf, 0xab, [@multicast2, @multicast1, @empty]}, @generic={0x82, 0x11, "aaec341cec58e3ed91f4330aa0598b"}]}}}}}) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8, 0x7ff, 0x7d43, 0x8, 0x825, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d4, &(0x7f0000000140)={0x4, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 527.753704][T27225] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:08:57 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x38a79, &(0x7f0000000740)=[{&(0x7f0000000840)={0x18, 0x2a, 0x1, 0x0, 0x0, "", [@typed={0x5001, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) [ 527.845668][T27230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:08:57 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x85a3880) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x9343}], 0x1000000000000006, 0x0, 0x0) 04:08:57 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001840)={0x20, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x20}], 0x1}, 0x0) [ 527.958003][T27235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 528.021813][T27230] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:08:57 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x38a79, &(0x7f0000000740)=[{&(0x7f0000000840)={0x18, 0x2a, 0x1, 0x0, 0x0, "", [@typed={0x5001, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) [ 528.083022][T27252] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 04:08:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 04:08:58 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'U\'!', 0x8, 0x2f, 0x0, @dev, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x2}]}}}}}, 0x0) [ 528.242342][T27265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 04:08:58 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x85a3880) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x9343}], 0x1000000000000006, 0x0, 0x0) 04:08:58 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x38a79, &(0x7f0000000740)=[{&(0x7f0000000840)={0x18, 0x2a, 0x1, 0x0, 0x0, "", [@typed={0x5001, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) [ 528.439213][T27271] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:08:58 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'U\'!', 0x8, 0x2f, 0x0, @dev, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x2}]}}}}}, 0x0) [ 528.744416][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 04:08:58 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000950000000000000000010000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x0, 0xd, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x61, 0x8, 0x9, 0x3f, 0xfffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0xfffffffe}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map={0x18, 0xa, 0x1, 0x0, r1}], &(0x7f0000000340)='GPL\x00', 0x1800, 0xfa, &(0x7f0000000380)=""/250, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xc, 0x7, 0x81}, 0x10}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x3, 0x4b4c, {{0xd, 0x4, 0x0, 0xd, 0x34, 0x0, 0x0, 0x1, 0x4, 0x0, @multicast1, @local, {[@lsrr={0x83, 0xf, 0xab, [@multicast2, @multicast1, @empty]}, @generic={0x82, 0x11, "aaec341cec58e3ed91f4330aa0598b"}]}}}}}) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x8, 0x7ff, 0x7d43, 0x8, 0x825, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d4, &(0x7f0000000140)={0x4, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:08:58 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x85a3880) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x9343}], 0x1000000000000006, 0x0, 0x0) 04:08:59 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'U\'!', 0x8, 0x2f, 0x0, @dev, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x2}]}}}}}, 0x0) 04:08:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 04:08:59 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x38a79, &(0x7f0000000740)=[{&(0x7f0000000840)={0x18, 0x2a, 0x1, 0x0, 0x0, "", [@typed={0x5001, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) 04:08:59 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x85a3880) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="80fd0f969341", 0x9343}], 0x1000000000000006, 0x0, 0x0) 04:08:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000010600000000000000000a20000000000a01000000000004000000000000000900010073797a300000000070000000120a0100001000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003400000000009000200000000200000000004000480040004800800034000000002140004800c000100fb"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) [ 529.305284][T27312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 529.319532][T27313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 04:08:59 executing program 4: syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'U\'!', 0x8, 0x2f, 0x0, @dev, @mcast2, {[@srh={0x0, 0x0, 0x8, 0x0, 0x0, 0x2}]}}}}}, 0x0) 04:08:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x44, 0x4, 0x7}, 0x40) shutdown(r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000200)=@udp6=r0}, 0x20) recvmmsg(r0, &(0x7f00000107c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x36010000, 0x0) 04:08:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 04:08:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfc6a) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 04:08:59 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x7ffffffff000) [ 529.583487][T27338] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 529.651261][T27338] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 529.841907][T27349] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 530.023310][T27349] 8021q: adding VLAN 0 to HW filter on device bond16 [ 530.100884][T27358] bond16: (slave bridge8): making interface the new active one 04:09:00 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10}]}}]}, 0x44}}, 0x0) 04:09:00 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 04:09:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x44, 0x4, 0x7}, 0x40) shutdown(r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000200)=@udp6=r0}, 0x20) recvmmsg(r0, &(0x7f00000107c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x36010000, 0x0) 04:09:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000010600000000000000000a20000000000a01000000000004000000000000000900010073797a300000000070000000120a0100001000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003400000000009000200000000200000000004000480040004800800034000000002140004800c000100fb"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 04:09:00 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x7ffffffff000) [ 530.192749][T27358] bond16: (slave bridge8): Enslaving as an active interface with an up link [ 530.209742][T15113] IPv6: ADDRCONF(NETDEV_CHANGE): bond16: link becomes ready [ 530.317013][T27349] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:09:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x44, 0x4, 0x7}, 0x40) shutdown(r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000200)=@udp6=r0}, 0x20) recvmmsg(r0, &(0x7f00000107c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x36010000, 0x0) 04:09:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000010600000000000000000a20000000000a01000000000004000000000000000900010073797a300000000070000000120a0100001000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003400000000009000200000000200000000004000480040004800800034000000002140004800c000100fb"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) [ 530.359827][T27358] bond16: (slave bridge9): Enslaving as a backup interface with an up link 04:09:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfc6a) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 04:09:00 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10}]}}]}, 0x44}}, 0x0) 04:09:00 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x7ffffffff000) 04:09:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x12, 0x44, 0x4, 0x7}, 0x40) shutdown(r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000100), &(0x7f0000000200)=@udp6=r0}, 0x20) recvmmsg(r0, &(0x7f00000107c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x36010000, 0x0) 04:09:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000010600000000000000000a20000000000a01000000000004000000000000000900010073797a300000000070000000120a0100001000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003400000000009000200000000200000000004000480040004800800034000000002140004800c000100fb"], 0xb8}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) [ 530.702051][T27427] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:09:00 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) [ 530.919064][T27427] 8021q: adding VLAN 0 to HW filter on device bond17 04:09:00 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x7ffffffff000) 04:09:00 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, 0x0, 0x0) [ 530.974866][T27433] bond17: (slave bridge10): making interface the new active one 04:09:00 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10}]}}]}, 0x44}}, 0x0) 04:09:00 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 04:09:00 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x0, 0x4b4c, {{0x12, 0x4, 0x0, 0x5, 0x48, 0x0, 0x0, 0x1, 0x4, 0x0, @multicast1, @local, {[@ssrr={0x89, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @empty]}, @generic={0x82, 0x11, "aaec341cec58e3ed91f4330aa0598b"}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @remote}, &(0x7f0000000300)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x20, 0x70bd29, 0x25dfdbfe, {0xa, 0x8, 0x80, 0xff, r1}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000814) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 531.052937][T27433] bond17: (slave bridge10): Enslaving as an active interface with an up link [ 531.162609][ T2970] IPv6: ADDRCONF(NETDEV_CHANGE): bond17: link becomes ready 04:09:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, 0x0, 0x0) 04:09:01 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfc6a) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 04:09:01 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10}]}}]}, 0x44}}, 0x0) 04:09:01 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) 04:09:01 executing program 4: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='!', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 04:09:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, 0x0, 0x0) [ 531.517668][T27493] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 531.712037][T27493] 8021q: adding VLAN 0 to HW filter on device bond18 04:09:01 executing program 4: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='!', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) 04:09:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0xc08, 0x3, 0x268, 0x120, 0x5002004a, 0x0, 0x0, 0x0, 0x1d0, 0x3c8, 0x3c8, 0x1d0, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'wlan0\x00', 'lo\x00'}, 0x60, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, 'wlan0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'rose0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) [ 531.820118][T27497] bond18: (slave bridge11): making interface the new active one 04:09:01 executing program 5: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801f0059cce59ba2700100e90005"], 0x1}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 531.888876][T27497] bond18: (slave bridge11): Enslaving as an active interface with an up link [ 531.953490][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bond18: link becomes ready 04:09:01 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd4, 0x0, 0x0) 04:09:02 executing program 4: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='!', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) [ 532.197929][ T26] audit: type=1804 audit(1637899741.969:184): pid=27544 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir457608659/syzkaller.DM79gG/140/cgroup.controllers" dev="sda1" ino=13837 res=1 errno=0 04:09:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0xc08, 0x3, 0x268, 0x120, 0x5002004a, 0x0, 0x0, 0x0, 0x1d0, 0x3c8, 0x3c8, 0x1d0, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'wlan0\x00', 'lo\x00'}, 0x60, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, 'wlan0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'rose0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) 04:09:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfc6a) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 04:09:02 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x0, 0x4b4c, {{0x12, 0x4, 0x0, 0x5, 0x48, 0x0, 0x0, 0x1, 0x4, 0x0, @multicast1, @local, {[@ssrr={0x89, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @empty]}, @generic={0x82, 0x11, "aaec341cec58e3ed91f4330aa0598b"}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @remote}, &(0x7f0000000300)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x20, 0x70bd29, 0x25dfdbfe, {0xa, 0x8, 0x80, 0xff, r1}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000814) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 532.365263][ T26] audit: type=1804 audit(1637899742.109:185): pid=27546 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir457608659/syzkaller.DM79gG/140/cgroup.controllers" dev="sda1" ino=13837 res=1 errno=0 04:09:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000012c0), &(0x7f0000001300)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x40) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) accept(0xffffffffffffffff, &(0x7f0000002f00)=@ax25={{0x3, @bcast}, [@null, @bcast, @default, @rose, @default, @netrom, @rose, @rose]}, &(0x7f0000002f80)=0x80) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000240), 0x4) connect$rose(0xffffffffffffffff, &(0x7f0000002fc0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 04:09:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007cc0)={&(0x7f00000005c0)=@newtaction={0x64, 0x31, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x3, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) [ 532.413730][T27554] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 04:09:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0xc08, 0x3, 0x268, 0x120, 0x5002004a, 0x0, 0x0, 0x0, 0x1d0, 0x3c8, 0x3c8, 0x1d0, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'wlan0\x00', 'lo\x00'}, 0x60, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, 'wlan0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'rose0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) 04:09:02 executing program 4: r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x400c004, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)='!', 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000340)) [ 532.596491][T27554] 8021q: adding VLAN 0 to HW filter on device bond19 04:09:02 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) [ 532.705323][T27557] bond19: (slave bridge12): making interface the new active one [ 532.772253][T27557] bond19: (slave bridge12): Enslaving as an active interface with an up link 04:09:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0xc08, 0x3, 0x268, 0x120, 0x5002004a, 0x0, 0x0, 0x0, 0x1d0, 0x3c8, 0x3c8, 0x1d0, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'wlan0\x00', 'lo\x00'}, 0x60, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'wg1\x00', {}, 'wlan0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'rose0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) [ 532.841685][T27599] netlink: 'syz-executor.5': attribute type 3 has an invalid length. [ 532.874529][T15123] IPv6: ADDRCONF(NETDEV_CHANGE): bond19: link becomes ready 04:09:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007cc0)={&(0x7f00000005c0)=@newtaction={0x64, 0x31, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x3, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 04:09:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0xc, 0x0, &(0x7f0000000240)) 04:09:03 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 533.314861][T27617] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 04:09:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0xc, 0x0, &(0x7f0000000240)) 04:09:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007cc0)={&(0x7f00000005c0)=@newtaction={0x64, 0x31, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x3, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 04:09:03 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x0, 0x4b4c, {{0x12, 0x4, 0x0, 0x5, 0x48, 0x0, 0x0, 0x1, 0x4, 0x0, @multicast1, @local, {[@ssrr={0x89, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @empty]}, @generic={0x82, 0x11, "aaec341cec58e3ed91f4330aa0598b"}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @remote}, &(0x7f0000000300)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x20, 0x70bd29, 0x25dfdbfe, {0xa, 0x8, 0x80, 0xff, r1}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000814) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 533.729353][T27627] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 04:09:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000012c0), &(0x7f0000001300)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x40) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) accept(0xffffffffffffffff, &(0x7f0000002f00)=@ax25={{0x3, @bcast}, [@null, @bcast, @default, @rose, @default, @netrom, @rose, @rose]}, &(0x7f0000002f80)=0x80) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000240), 0x4) connect$rose(0xffffffffffffffff, &(0x7f0000002fc0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 04:09:03 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 04:09:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0xc, 0x0, &(0x7f0000000240)) 04:09:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007cc0)={&(0x7f00000005c0)=@newtaction={0x64, 0x31, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x3, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 04:09:03 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) 04:09:03 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) [ 534.081537][T27639] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 04:09:03 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0xc, 0x0, &(0x7f0000000240)) 04:09:03 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000012c0), &(0x7f0000001300)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x40) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) accept(0xffffffffffffffff, &(0x7f0000002f00)=@ax25={{0x3, @bcast}, [@null, @bcast, @default, @rose, @default, @netrom, @rose, @rose]}, &(0x7f0000002f80)=0x80) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000240), 0x4) connect$rose(0xffffffffffffffff, &(0x7f0000002fc0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 04:09:04 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) 04:09:04 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) 04:09:04 executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 04:09:05 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) 04:09:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000012c0), &(0x7f0000001300)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) connect$rose(0xffffffffffffffff, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x40) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/18, 0x30c000, 0x800}, 0x200d20) accept(0xffffffffffffffff, &(0x7f0000002f00)=@ax25={{0x3, @bcast}, [@null, @bcast, @default, @rose, @default, @netrom, @rose, @rose]}, &(0x7f0000002f80)=0x80) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000240), 0x4) connect$rose(0xffffffffffffffff, &(0x7f0000002fc0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 04:09:05 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x8000, 0x8, 0x0, 0x4b4c, {{0x12, 0x4, 0x0, 0x5, 0x48, 0x0, 0x0, 0x1, 0x4, 0x0, @multicast1, @local, {[@ssrr={0x89, 0x23, 0x34, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, @empty]}, @generic={0x82, 0x11, "aaec341cec58e3ed91f4330aa0598b"}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @remote}, &(0x7f0000000300)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x20, 0x70bd29, 0x25dfdbfe, {0xa, 0x8, 0x80, 0xff, r1}, [@IFA_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000814) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 04:09:05 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) 04:09:05 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) 04:09:05 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) 04:09:06 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 04:09:07 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) 04:09:07 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) 04:09:07 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) 04:09:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000004b40)="cbf3024ebe5dbd7c5162cd26df5e4743d421c48fa3269d0a9679c0cf2b1250d27d3d929905e3b25063", 0x29) 04:09:07 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) 04:09:07 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 04:09:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000004b40)="cbf3024ebe5dbd7c5162cd26df5e4743d421c48fa3269d0a9679c0cf2b1250d27d3d929905e3b25063", 0x29) 04:09:07 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101}, 0x14}}, 0x0) 04:09:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000004b40)="cbf3024ebe5dbd7c5162cd26df5e4743d421c48fa3269d0a9679c0cf2b1250d27d3d929905e3b25063", 0x29) 04:09:08 executing program 3: r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{}, 0xffffffff}}, 0x10) 04:09:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000004b40)="cbf3024ebe5dbd7c5162cd26df5e4743d421c48fa3269d0a9679c0cf2b1250d27d3d929905e3b25063", 0x29) 04:09:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x35, 0x0, 0x0) 04:09:08 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @nfc={0x27, 0x0, 0x0, 0x3}, @isdn, @hci, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='macvlan0\x00', 0x3, 0x6, 0xed66}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0}, 0x20) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f00000000c0)) 04:09:08 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/1601], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x12, @inherit={0x48, &(0x7f0000001800)={0x1, 0x0, 0x5, 0x0, {0x8, 0x0, 0x5, 0x0, 0x8770}}}, @subvolid=0x1f}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x1ff, 0x7, 0x8], @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 04:09:08 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtaction={0x488, 0x30, 0x16065126a33bff1f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) 04:09:08 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) 04:09:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_TXQLEN={0x8, 0xd, 0x132ec8d1}]}, 0x28}}, 0x0) 04:09:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x35, 0x0, 0x0) 04:09:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) [ 539.266923][T27746] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 04:09:09 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/1601], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x12, @inherit={0x48, &(0x7f0000001800)={0x1, 0x0, 0x5, 0x0, {0x8, 0x0, 0x5, 0x0, 0x8770}}}, @subvolid=0x1f}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x1ff, 0x7, 0x8], @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 04:09:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x35, 0x0, 0x0) 04:09:09 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtaction={0x488, 0x30, 0x16065126a33bff1f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) [ 539.508406][T27753] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 539.545745][T27757] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len 04:09:09 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) 04:09:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x35, 0x0, 0x0) [ 539.688017][T27763] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 04:09:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xe0, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ip={@remote, @local, 0x0, 0x0, 'ipvlan0\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@set={{0x40}}, @common=@inet=@hashlimit1={{0x58}, {'rose0\x00'}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 04:09:10 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtaction={0x488, 0x30, 0x16065126a33bff1f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) 04:09:10 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/1601], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x12, @inherit={0x48, &(0x7f0000001800)={0x1, 0x0, 0x5, 0x0, {0x8, 0x0, 0x5, 0x0, 0x8770}}}, @subvolid=0x1f}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x1ff, 0x7, 0x8], @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) 04:09:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_UID={0x8}]}, 0x24}}, 0x0) 04:09:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "336b4e1f91395acc"}}]}, 0x30}}, 0x0) 04:09:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_TXQLEN={0x8, 0xd, 0x132ec8d1}]}, 0x28}}, 0x0) [ 540.317132][T27777] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 540.330101][T27778] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 04:09:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_TXQLEN={0x8, 0xd, 0x132ec8d1}]}, 0x28}}, 0x0) 04:09:10 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtaction={0x488, 0x30, 0x16065126a33bff1f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RATE={0x404, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) 04:09:10 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) unshare(0x28000000) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x9a35, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xf, 0x5, 0x7}, 0x10, 0xffffffffffffffff}, 0x78) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000240)="ecc445c2fea84255257a97adde704d5ec62c1c350c10bcac1c2f136c296b21e5f3552359d858b85f4cb473e98cff65e733ebf0f5792f00bfd24147505ae7278e51f3bda470d9e435dcdf2745040aee559a56d4b82510baded460e36a41e83cad709abc815ade84e73354a79dff53fb182d22ef", 0x73, 0x4000, &(0x7f0000000040)={0xa, 0x4e24, 0xffff, @mcast1, 0x1}, 0x1c) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000100), &(0x7f0000000000)=@tcp6=r4}, 0x20) poll(&(0x7f0000000200)=[{r1, 0x602}, {r1}, {r2, 0x1400}, {r3, 0x2000}, {r0}, {r0, 0x8064}, {r0, 0x40}], 0x7, 0x1fb8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) 04:09:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xe0, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ip={@remote, @local, 0x0, 0x0, 'ipvlan0\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@set={{0x40}}, @common=@inet=@hashlimit1={{0x58}, {'rose0\x00'}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 04:09:10 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"/1601], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000800)={{}, 0x0, 0x12, @inherit={0x48, &(0x7f0000001800)={0x1, 0x0, 0x5, 0x0, {0x8, 0x0, 0x5, 0x0, 0x8770}}}, @subvolid=0x1f}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0x1ff, 0x7, 0x8], @devid}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) [ 540.589883][T27788] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len [ 540.607093][T27789] netlink: 'syz-executor.1': attribute type 10 has an invalid length. 04:09:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_TXQLEN={0x8, 0xd, 0x132ec8d1}]}, 0x28}}, 0x0) 04:09:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xe0, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ip={@remote, @local, 0x0, 0x0, 'ipvlan0\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@set={{0x40}}, @common=@inet=@hashlimit1={{0x58}, {'rose0\x00'}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 04:09:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0xc8, 0x3c6, 0x0, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x118, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x360) 04:09:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "336b4e1f91395acc"}}]}, 0x30}}, 0x0) [ 540.970347][T27806] mac80211_hwsim hwsim9 wlan1: refused to change device tx_queue_len 04:09:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x3a0, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xe0, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}, {{@ip={@remote, @local, 0x0, 0x0, 'ipvlan0\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@set={{0x40}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@set={{0x40}}, @common=@inet=@hashlimit1={{0x58}, {'rose0\x00'}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 04:09:10 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2000000012005ff3fdb2e933004aa00080", 0x11) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=')\x00\x00\x00 ', 0x5}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 04:09:10 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0xc8, 0x3c6, 0x0, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x118, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x360) 04:09:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "336b4e1f91395acc"}}]}, 0x30}}, 0x0) 04:09:10 executing program 4: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801f923b8dd29ba2700100e90005"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0xf01, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000180)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0), 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 541.326534][T27817] __nla_validate_parse: 9 callbacks suppressed [ 541.326552][T27817] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.3'. [ 541.473040][ T26] audit: type=1804 audit(1637899751.249:186): pid=27834 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir277763856/syzkaller.EezhJV/545/cgroup.controllers" dev="sda1" ino=14753 res=1 errno=0 04:09:11 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) unshare(0x28000000) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x9a35, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xf, 0x5, 0x7}, 0x10, 0xffffffffffffffff}, 0x78) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000240)="ecc445c2fea84255257a97adde704d5ec62c1c350c10bcac1c2f136c296b21e5f3552359d858b85f4cb473e98cff65e733ebf0f5792f00bfd24147505ae7278e51f3bda470d9e435dcdf2745040aee559a56d4b82510baded460e36a41e83cad709abc815ade84e73354a79dff53fb182d22ef", 0x73, 0x4000, &(0x7f0000000040)={0xa, 0x4e24, 0xffff, @mcast1, 0x1}, 0x1c) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000100), &(0x7f0000000000)=@tcp6=r4}, 0x20) poll(&(0x7f0000000200)=[{r1, 0x602}, {r1}, {r2, 0x1400}, {r3, 0x2000}, {r0}, {r0, 0x8064}, {r0, 0x40}], 0x7, 0x1fb8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) 04:09:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0xc8, 0x3c6, 0x0, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x118, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x360) 04:09:11 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/139, 0x8b}, {&(0x7f0000000440)=""/4102, 0x1006}], 0x4}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="20150020200027", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b) 04:09:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {}, {}, {}], "336b4e1f91395acc"}}]}, 0x30}}, 0x0) [ 541.732775][T27846] netlink: 40318 bytes leftover after parsing attributes in process `syz-executor.5'. 04:09:11 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0xc8, 0x3c6, 0x0, 0x5803, 0x230, 0x2e8, 0x2e8, 0x230, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x118, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x360) [ 541.804654][T27850] netlink: 40318 bytes leftover after parsing attributes in process `syz-executor.5'. 04:09:11 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) unshare(0x28000000) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x9a35, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xf, 0x5, 0x7}, 0x10, 0xffffffffffffffff}, 0x78) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000240)="ecc445c2fea84255257a97adde704d5ec62c1c350c10bcac1c2f136c296b21e5f3552359d858b85f4cb473e98cff65e733ebf0f5792f00bfd24147505ae7278e51f3bda470d9e435dcdf2745040aee559a56d4b82510baded460e36a41e83cad709abc815ade84e73354a79dff53fb182d22ef", 0x73, 0x4000, &(0x7f0000000040)={0xa, 0x4e24, 0xffff, @mcast1, 0x1}, 0x1c) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000100), &(0x7f0000000000)=@tcp6=r4}, 0x20) poll(&(0x7f0000000200)=[{r1, 0x602}, {r1}, {r2, 0x1400}, {r3, 0x2000}, {r0}, {r0, 0x8064}, {r0, 0x40}], 0x7, 0x1fb8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) [ 541.909212][ T26] audit: type=1804 audit(1637899751.689:187): pid=27840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir277763856/syzkaller.EezhJV/545/cgroup.controllers" dev="sda1" ino=14753 res=1 errno=0 04:09:11 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/139, 0x8b}, {&(0x7f0000000440)=""/4102, 0x1006}], 0x4}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="20150020200027", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 542.029276][T27840] syz-executor.4: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 04:09:11 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2000000012005ff3fdb2e933004aa00080", 0x11) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=')\x00\x00\x00 ', 0x5}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 04:09:11 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x24}}, 0x4000000) [ 542.184194][T27840] CPU: 1 PID: 27840 Comm: syz-executor.4 Not tainted 5.16.0-rc1-syzkaller #0 [ 542.193015][T27840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 542.203095][T27840] Call Trace: [ 542.206386][T27840] [ 542.209325][T27840] dump_stack_lvl+0xcd/0x134 [ 542.213947][T27840] warn_alloc.cold+0x87/0x17a [ 542.218653][T27840] ? zone_watermark_ok_safe+0x290/0x290 [ 542.224215][T27840] ? __kmalloc_node+0x62/0x390 [ 542.229141][T27840] ? __vmalloc_node_range+0x574/0xab0 [ 542.234540][T27840] __vmalloc_node_range+0x883/0xab0 [ 542.239774][T27840] ? vfree_atomic+0xe0/0xe0 [ 542.244313][T27840] ? netlink_sendmsg+0x5f0/0xda0 [ 542.249277][T27840] vmalloc+0x67/0x80 [ 542.253198][T27840] ? netlink_sendmsg+0x5f0/0xda0 [ 542.258152][T27840] netlink_sendmsg+0x5f0/0xda0 [ 542.262947][T27840] ? netlink_unicast+0x7d0/0x7d0 [ 542.267920][T27840] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 542.273929][T27840] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 542.280196][T27840] ? netlink_unicast+0x7d0/0x7d0 [ 542.285159][T27840] sock_sendmsg+0xcf/0x120 [ 542.289596][T27840] sock_no_sendpage+0xf6/0x140 [ 542.294381][T27840] ? sock_no_shutdown+0x10/0x10 [ 542.299354][T27840] ? find_held_lock+0x2d/0x110 [ 542.304148][T27840] kernel_sendpage.part.0+0x1a0/0x340 [ 542.309553][T27840] sock_sendpage+0xe5/0x140 [ 542.314079][T27840] ? __sock_recv_ts_and_drops+0x430/0x430 [ 542.319817][T27840] pipe_to_sendpage+0x2ad/0x380 [ 542.324697][T27840] ? propagate_umount+0x19f0/0x19f0 [ 542.329922][T27840] ? __put_page+0x13d/0x470 [ 542.334447][T27840] __splice_from_pipe+0x43e/0x8a0 [ 542.339500][T27840] ? propagate_umount+0x19f0/0x19f0 [ 542.344726][T27840] generic_splice_sendpage+0xd4/0x140 [ 542.350130][T27840] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 542.355267][T27840] ? security_file_permission+0xab/0xd0 [ 542.360843][T27840] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 542.365979][T27840] direct_splice_actor+0x110/0x180 [ 542.371145][T27840] splice_direct_to_actor+0x34b/0x8c0 [ 542.376545][T27840] ? generic_file_splice_read+0x6d0/0x6d0 [ 542.382295][T27840] ? do_splice_to+0x250/0x250 [ 542.386992][T27840] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 542.393267][T27840] ? security_file_permission+0xab/0xd0 [ 542.398845][T27840] do_splice_direct+0x1b3/0x280 [ 542.403724][T27840] ? splice_direct_to_actor+0x8c0/0x8c0 [ 542.409310][T27840] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 542.415571][T27840] ? security_file_permission+0xab/0xd0 [ 542.421144][T27840] do_sendfile+0xaf2/0x1250 [ 542.425682][T27840] ? do_pwritev+0x270/0x270 [ 542.430209][T27840] ? __context_tracking_exit+0xb8/0xe0 [ 542.435696][T27840] ? lock_downgrade+0x6e0/0x6e0 [ 542.440566][T27840] ? lock_downgrade+0x6e0/0x6e0 [ 542.445441][T27840] __x64_sys_sendfile64+0x1cc/0x210 [ 542.450663][T27840] ? __ia32_sys_sendfile+0x220/0x220 [ 542.455969][T27840] ? syscall_enter_from_user_mode+0x21/0x70 [ 542.461891][T27840] do_syscall_64+0x35/0xb0 [ 542.466329][T27840] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 542.472236][T27840] RIP: 0033:0x7fb4ab4aeae9 [ 542.476659][T27840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 542.496281][T27840] RSP: 002b:00007fb4a8a03188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 542.504746][T27840] RAX: ffffffffffffffda RBX: 00007fb4ab5c2020 RCX: 00007fb4ab4aeae9 [ 542.512766][T27840] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 542.520745][T27840] RBP: 00007fb4ab508f6d R08: 0000000000000000 R09: 0000000000000000 [ 542.528734][T27840] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000000 [ 542.536727][T27840] R13: 00007ffff2eb1cdf R14: 00007fb4a8a03300 R15: 0000000000022000 [ 542.544733][T27840] 04:09:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, 0x0, 0x200600) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="2e00000010008108040f80ecdb4cb92e0a480e002a00000001bd6efb250309000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) [ 542.697589][T27886] netlink: 40318 bytes leftover after parsing attributes in process `syz-executor.5'. [ 542.735885][T27885] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.3'. 04:09:12 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) unshare(0x28000000) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x9a35, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xf, 0x5, 0x7}, 0x10, 0xffffffffffffffff}, 0x78) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000240)="ecc445c2fea84255257a97adde704d5ec62c1c350c10bcac1c2f136c296b21e5f3552359d858b85f4cb473e98cff65e733ebf0f5792f00bfd24147505ae7278e51f3bda470d9e435dcdf2745040aee559a56d4b82510baded460e36a41e83cad709abc815ade84e73354a79dff53fb182d22ef", 0x73, 0x4000, &(0x7f0000000040)={0xa, 0x4e24, 0xffff, @mcast1, 0x1}, 0x1c) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000100), &(0x7f0000000000)=@tcp6=r4}, 0x20) poll(&(0x7f0000000200)=[{r1, 0x602}, {r1}, {r2, 0x1400}, {r3, 0x2000}, {r0}, {r0, 0x8064}, {r0, 0x40}], 0x7, 0x1fb8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) [ 542.887931][T27894] device batadv_slave_0 entered promiscuous mode [ 543.707117][T27840] Mem-Info: [ 543.710308][T27840] active_anon:280 inactive_anon:46719 isolated_anon:0 [ 543.710308][T27840] active_file:6341 inactive_file:80713 isolated_file:0 [ 543.710308][T27840] unevictable:768 dirty:573 writeback:0 [ 543.710308][T27840] slab_reclaimable:22296 slab_unreclaimable:113258 [ 543.710308][T27840] mapped:60881 shmem:6276 pagetables:1071 bounce:0 [ 543.710308][T27840] kernel_misc_reclaimable:0 [ 543.710308][T27840] free:1297755 free_pcp:10887 free_cma:0 [ 543.797175][T27840] Node 0 active_anon:1120kB inactive_anon:185960kB active_file:25248kB inactive_file:322852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:243524kB dirty:2288kB writeback:0kB shmem:22652kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 153600kB writeback_tmp:0kB kernel_stack:10956kB pagetables:4280kB all_unreclaimable? no [ 543.856686][T27840] Node 1 active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2452kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no [ 543.887221][T27840] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 543.924179][T27840] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 543.966217][T27840] Node 0 DMA32 free:1225672kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:1120kB inactive_anon:184860kB active_file:25248kB inactive_file:322852kB unevictable:1536kB writepending:2288kB present:3129332kB managed:2716744kB mlocked:0kB bounce:0kB free_pcp:43552kB local_pcp:22016kB free_cma:0kB [ 544.008939][T27840] lowmem_reserve[]: 0 0 0 0 0 [ 544.013789][T27840] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 544.048235][T27840] lowmem_reserve[]: 0 0 0 0 0 [ 544.053068][T27840] Node 1 Normal free:3949848kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:0kB inactive_anon:916kB active_file:116kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:808kB local_pcp:808kB free_cma:0kB [ 544.083001][T27840] lowmem_reserve[]: 0 0 0 0 0 [ 544.088133][T27840] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 544.101892][T27840] Node 0 DMA32: 2494*4kB (UME) 1370*8kB (UME) 511*16kB (UME) 110*32kB (UME) 289*64kB (UME) 145*128kB (UME) 58*256kB (UM) 15*512kB (UM) 3*1024kB (UME) 4*2048kB (UM) 274*4096kB (UM) = 1225784kB [ 544.122359][T27840] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 544.134392][T27840] Node 1 Normal: 140*4kB (UME) 59*8kB (UME) 45*16kB (UME) 198*32kB (UME) 82*64kB (UE) 34*128kB (UME) 18*256kB (U) 3*512kB (U) 0*1024kB 3*2048kB (UM) 957*4096kB (M) = 3949848kB [ 544.153868][T27840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.170647][T27840] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 544.180706][T27840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 544.190740][T27840] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 544.200994][T27840] 49966 total pagecache pages [ 544.205772][T27840] 0 pages in swap cache [ 544.210468][T27840] Swap cache stats: add 0, delete 0, find 0/0 [ 544.216642][T27840] Free swap = 0kB [ 544.220902][T27840] Total swap = 0kB [ 544.224738][T27840] 2097051 pages RAM [ 544.229947][T27840] 0 pages HighMem/MovableOnly [ 544.234713][T27840] 384520 pages reserved [ 544.240243][T27840] 0 pages cma reserved 04:09:14 executing program 4: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801f923b8dd29ba2700100e90005"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0xf01, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000180)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0), 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 04:09:14 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/139, 0x8b}, {&(0x7f0000000440)=""/4102, 0x1006}], 0x4}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="20150020200027", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b) 04:09:14 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000002c0)={0x578, {{0xa, 0x4e24, 0x8, @remote, 0x5}}}, 0x88) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4092, 0xffffff15}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x1c, 0x40000) pread64(r2, &(0x7f00000004c0)=""/160, 0xa0, 0x3) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0xc5, &(0x7f0000000240)={0xa, 0x4e24, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000680)=ANY=[@ANYRES32], &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x18, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8002, 0x0, 0x3, 0x0, 0x20, 0x100}, &(0x7f00000005c0)=0x20) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x72, 0x120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="3124c4025e0cd512192a9d612b5406ad251f79d39c57be74e822a12f26dba95b77a10f528bd203b1fbd63c4183a4112035709c776f818a0a836e3c8a518cc7f9dac390da68d8d43b"], &(0x7f0000000380)=0xc) sendto$inet6(r3, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) 04:09:14 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2000000012005ff3fdb2e933004aa00080", 0x11) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=')\x00\x00\x00 ', 0x5}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 04:09:14 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) unshare(0x28000000) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x9a35, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xf, 0x5, 0x7}, 0x10, 0xffffffffffffffff}, 0x78) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000240)="ecc445c2fea84255257a97adde704d5ec62c1c350c10bcac1c2f136c296b21e5f3552359d858b85f4cb473e98cff65e733ebf0f5792f00bfd24147505ae7278e51f3bda470d9e435dcdf2745040aee559a56d4b82510baded460e36a41e83cad709abc815ade84e73354a79dff53fb182d22ef", 0x73, 0x4000, &(0x7f0000000040)={0xa, 0x4e24, 0xffff, @mcast1, 0x1}, 0x1c) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000100), &(0x7f0000000000)=@tcp6=r4}, 0x20) poll(&(0x7f0000000200)=[{r1, 0x602}, {r1}, {r2, 0x1400}, {r3, 0x2000}, {r0}, {r0, 0x8064}, {r0, 0x40}], 0x7, 0x1fb8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) 04:09:14 executing program 0: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) unshare(0x28000000) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x9a35, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xf, 0x5, 0x7}, 0x10, 0xffffffffffffffff}, 0x78) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000240)="ecc445c2fea84255257a97adde704d5ec62c1c350c10bcac1c2f136c296b21e5f3552359d858b85f4cb473e98cff65e733ebf0f5792f00bfd24147505ae7278e51f3bda470d9e435dcdf2745040aee559a56d4b82510baded460e36a41e83cad709abc815ade84e73354a79dff53fb182d22ef", 0x73, 0x4000, &(0x7f0000000040)={0xa, 0x4e24, 0xffff, @mcast1, 0x1}, 0x1c) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000100), &(0x7f0000000000)=@tcp6=r4}, 0x20) poll(&(0x7f0000000200)=[{r1, 0x602}, {r1}, {r2, 0x1400}, {r3, 0x2000}, {r0}, {r0, 0x8064}, {r0, 0x40}], 0x7, 0x1fb8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) [ 544.394884][T27951] netlink: 44218 bytes leftover after parsing attributes in process `syz-executor.1'. [ 544.754609][T27955] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.3'. [ 544.783636][T27965] netlink: 44302 bytes leftover after parsing attributes in process `syz-executor.5'. [ 544.833956][T27951] netlink: 44218 bytes leftover after parsing attributes in process `syz-executor.1'. 04:09:14 executing program 5: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000003c0)="1c000000120005070c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000140)=""/54, 0x36}, {&(0x7f0000000180)=""/69, 0x45}, {&(0x7f0000000200)=""/139, 0x8b}, {&(0x7f0000000440)=""/4102, 0x1006}], 0x4}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="20150020200027", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="78ad000010", 0x5, 0x0, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)='.', 0x10a25, 0x800, 0x0, 0x4b6ae4f95a5de35b) [ 544.881563][ T26] audit: type=1804 audit(1637899754.660:188): pid=27961 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir277763856/syzkaller.EezhJV/546/cgroup.controllers" dev="sda1" ino=15249 res=1 errno=0 04:09:14 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000002c0)={0x578, {{0xa, 0x4e24, 0x8, @remote, 0x5}}}, 0x88) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f00000029c0)=""/4092, 0xffffff15}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000140)=0x1c, 0x40000) pread64(r2, &(0x7f00000004c0)=""/160, 0xa0, 0x3) sendto$inet6(r0, &(0x7f0000000200), 0x0, 0xc5, &(0x7f0000000240)={0xa, 0x4e24, 0xffffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000680)=ANY=[@ANYRES32], &(0x7f0000000280)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x18, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x8002, 0x0, 0x3, 0x0, 0x20, 0x100}, &(0x7f00000005c0)=0x20) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x72, 0x120, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="3124c4025e0cd512192a9d612b5406ad251f79d39c57be74e822a12f26dba95b77a10f528bd203b1fbd63c4183a4112035709c776f818a0a836e3c8a518cc7f9dac390da68d8d43b"], &(0x7f0000000380)=0xc) sendto$inet6(r3, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) accept$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c) [ 545.135515][T27978] netlink: 40318 bytes leftover after parsing attributes in process `syz-executor.5'. 04:09:15 executing program 5: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801f923b8dd29ba2700100e90005"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0xf01, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000180)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0), 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 04:09:15 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="2000000012005ff3fdb2e933004aa00080", 0x11) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=')\x00\x00\x00 ', 0x5}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 04:09:15 executing program 0: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801f923b8dd29ba2700100e90005"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0xf01, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000180)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0), 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 545.489568][T28000] ------------[ cut here ]------------ [ 545.495217][T28000] refcount_t: decrement hit 0; leaking memory. [ 545.529229][T28000] WARNING: CPU: 0 PID: 28000 at lib/refcount.c:31 refcount_warn_saturate+0xbf/0x1e0 04:09:15 executing program 4: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801f923b8dd29ba2700100e90005"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0xf01, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000180)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0), 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 545.589508][T28000] Modules linked in: [ 545.619486][T28000] CPU: 0 PID: 28000 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 545.663323][T28000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 545.727626][T28000] RIP: 0010:refcount_warn_saturate+0xbf/0x1e0 [ 545.756267][ T26] audit: type=1804 audit(1637899755.530:189): pid=28010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir457608659/syzkaller.DM79gG/160/cgroup.controllers" dev="sda1" ino=14961 res=1 errno=0 [ 545.759872][T28000] Code: 1d d4 60 a2 09 31 ff 89 de e8 ed ec 9c fd 84 db 75 e0 e8 04 e9 9c fd 48 c7 c7 20 de 04 8a c6 05 b4 60 a2 09 01 e8 7b c1 33 05 <0f> 0b eb c4 e8 e8 e8 9c fd 0f b6 1d a3 60 a2 09 31 ff 89 de e8 b8 04:09:15 executing program 2: unshare(0x6c060000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) unshare(0x28000000) shutdown(r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x9a35, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0xf, 0x5, 0x7}, 0x10, 0xffffffffffffffff}, 0x78) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x4}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, &(0x7f0000000240)="ecc445c2fea84255257a97adde704d5ec62c1c350c10bcac1c2f136c296b21e5f3552359d858b85f4cb473e98cff65e733ebf0f5792f00bfd24147505ae7278e51f3bda470d9e435dcdf2745040aee559a56d4b82510baded460e36a41e83cad709abc815ade84e73354a79dff53fb182d22ef", 0x73, 0x4000, &(0x7f0000000040)={0xa, 0x4e24, 0xffff, @mcast1, 0x1}, 0x1c) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000100), &(0x7f0000000000)=@tcp6=r4}, 0x20) poll(&(0x7f0000000200)=[{r1, 0x602}, {r1}, {r2, 0x1400}, {r3, 0x2000}, {r0}, {r0, 0x8064}, {r0, 0x40}], 0x7, 0x1fb8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) [ 545.994660][ T26] audit: type=1804 audit(1637899755.770:190): pid=28019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir149024756/syzkaller.DbPSBm/533/cgroup.controllers" dev="sda1" ino=15169 res=1 errno=0 [ 546.059228][T28000] RSP: 0018:ffffc9000520f7e8 EFLAGS: 00010282 [ 546.087098][T28000] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 546.126092][T28000] RDX: 0000000000040000 RSI: ffffffff815f0ad8 RDI: fffff52000a41eef [ 546.194234][ T26] audit: type=1804 audit(1637899755.970:191): pid=28038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir277763856/syzkaller.EezhJV/547/cgroup.controllers" dev="sda1" ino=15265 res=1 errno=0 [ 546.244586][T28000] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 546.355720][T28000] R10: ffffffff815ea87e R11: 0000000000000000 R12: ffff8880514b65b0 [ 546.417611][T28000] R13: ffff8880514b65a0 R14: fffffbfff1701e30 R15: dffffc0000000000 04:09:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000006c0)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) [ 546.490458][T28000] FS: 00007f91719c5700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 04:09:16 executing program 5: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801f923b8dd29ba2700100e90005"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0xf01, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000180)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0), 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 546.595667][T28000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.646047][T28000] CR2: 0000001b2d049000 CR3: 0000000050041000 CR4: 00000000003506e0 [ 546.689726][T28000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 546.692448][T28050] tipc: Started in network mode [ 546.728901][T28000] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 04:09:16 executing program 0: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801f923b8dd29ba2700100e90005"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0xf01, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000180)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0), 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 546.735011][T28050] tipc: Node identity 00000000000000000000ffffe0000001, cluster identity 4711 [ 546.768222][T28000] Call Trace: [ 546.781852][T28000] [ 546.794380][T28000] vlan_dev_free+0xdc/0x100 [ 546.809531][T28000] ? vlan_dev_netpoll_setup+0x120/0x120 [ 546.810958][T28050] tipc: Enabling of bearer rejected, failed to enable media [ 546.831965][T28000] netdev_run_todo+0x6b4/0xa80 04:09:16 executing program 4: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x54, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}]}, 0x54}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601801f923b8dd29ba2700100e90005"], 0x1}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x3, 0x2, 0xf01, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000180)="ce", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0), 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 546.852688][T28000] ? find_held_lock+0x2d/0x110 [ 546.883878][T28000] ? generic_xdp_install+0x4a0/0x4a0 [ 546.906389][T28000] ? rtnetlink_rcv_msg+0x388/0xb80 [ 546.935180][T28000] ? lock_downgrade+0x6e0/0x6e0 [ 546.955760][T28000] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 546.981582][T28000] ? valid_bridge_getlink_req.constprop.0+0x600/0x600 [ 546.999588][T28056] tipc: Enabling of bearer rejected, failed to enable media [ 547.010109][T28000] rtnetlink_rcv_msg+0x420/0xb80 [ 547.034302][T28000] ? rtnl_newlink+0xa0/0xa0 [ 547.064065][T28000] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 547.096796][T28000] netlink_rcv_skb+0x153/0x420 04:09:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000006c0)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) [ 547.120466][T28000] ? rtnl_newlink+0xa0/0xa0 [ 547.141184][ T26] audit: type=1804 audit(1637899756.920:192): pid=28054 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir457608659/syzkaller.DM79gG/161/cgroup.controllers" dev="sda1" ino=14945 res=1 errno=0 [ 547.161826][T28000] ? netlink_ack+0xa60/0xa60 [ 547.214360][T28000] ? netlink_deliver_tap+0x1a2/0xc30 [ 547.239396][T28000] ? netlink_deliver_tap+0x1b1/0xc30 [ 547.279417][T28000] netlink_unicast+0x533/0x7d0 [ 547.307844][T28000] ? netlink_attachskb+0x880/0x880 [ 547.334246][T28000] ? __virt_addr_valid+0x5d/0x2d0 [ 547.352079][ T26] audit: type=1804 audit(1637899757.020:193): pid=28063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir149024756/syzkaller.DbPSBm/534/cgroup.controllers" dev="sda1" ino=15137 res=1 errno=0 [ 547.359457][T28000] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 547.477928][T28079] tipc: Enabling of bearer rejected, failed to enable media [ 547.483865][ T26] audit: type=1804 audit(1637899757.180:194): pid=28072 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir277763856/syzkaller.EezhJV/548/cgroup.controllers" dev="sda1" ino=15217 res=1 errno=0 [ 547.517133][T28000] ? __phys_addr_symbol+0x2c/0x70 [ 547.522291][T28000] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 547.535095][T28000] ? __check_object_size+0x16e/0x3f0 [ 547.585366][T28000] netlink_sendmsg+0x86d/0xda0 [ 547.616001][T28000] ? netlink_unicast+0x7d0/0x7d0 04:09:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000006c0)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) [ 547.647032][T28000] ? __fget_files+0x23d/0x3e0 [ 547.675671][T28000] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 547.720420][T28000] ? netlink_unicast+0x7d0/0x7d0 [ 547.735509][T28000] sock_sendmsg+0xcf/0x120 [ 547.746946][T28000] __sys_sendto+0x21c/0x320 [ 547.765919][T28000] ? __ia32_sys_getpeername+0xb0/0xb0 [ 547.798412][T28000] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 547.819172][T28000] ? __context_tracking_exit+0xb8/0xe0 [ 547.854396][T28000] ? lock_downgrade+0x6e0/0x6e0 [ 547.878711][T28000] ? lock_downgrade+0x6e0/0x6e0 [ 547.892111][T28088] tipc: Enabling of bearer rejected, failed to enable media [ 547.937296][T28000] __x64_sys_sendto+0xdd/0x1b0 [ 547.942109][T28000] ? lockdep_hardirqs_on+0x79/0x100 [ 547.969687][T28000] ? syscall_enter_from_user_mode+0x21/0x70 [ 548.007920][T28000] do_syscall_64+0x35/0xb0 [ 548.012386][T28000] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 548.029675][T28000] RIP: 0033:0x7f917444fae9 [ 548.039644][T28000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 548.065861][T28000] RSP: 002b:00007f91719c5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 548.082896][T28000] RAX: ffffffffffffffda RBX: 00007f9174562f60 RCX: 00007f917444fae9 [ 548.096091][T28000] RDX: 0000000000010a73 RSI: 0000000020000000 RDI: 0000000000000005 [ 548.113927][T28000] RBP: 00007f91744a9f6d R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 548.127251][T28000] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 548.147230][T28000] R13: 00007fff407a0fcf R14: 00007f91719c5300 R15: 0000000000022000 [ 548.155446][T28000] [ 548.160478][T28000] Kernel panic - not syncing: panic_on_warn set ... [ 548.167071][T28000] CPU: 1 PID: 28000 Comm: syz-executor.1 Not tainted 5.16.0-rc1-syzkaller #0 [ 548.175838][T28000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 548.185895][T28000] Call Trace: [ 548.189183][T28000] [ 548.192115][T28000] dump_stack_lvl+0xcd/0x134 [ 548.196726][T28000] panic+0x2b0/0x6dd [ 548.200686][T28000] ? __warn_printk+0xf3/0xf3 [ 548.205299][T28000] ? __warn.cold+0x1a/0x44 [ 548.209733][T28000] ? refcount_warn_saturate+0xbf/0x1e0 [ 548.215213][T28000] __warn.cold+0x35/0x44 [ 548.219463][T28000] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 548.225721][T28000] ? refcount_warn_saturate+0xbf/0x1e0 [ 548.231198][T28000] report_bug+0x1bd/0x210 [ 548.235632][T28000] handle_bug+0x3c/0x60 [ 548.239805][T28000] exc_invalid_op+0x14/0x40 [ 548.244326][T28000] asm_exc_invalid_op+0x12/0x20 [ 548.249189][T28000] RIP: 0010:refcount_warn_saturate+0xbf/0x1e0 [ 548.255277][T28000] Code: 1d d4 60 a2 09 31 ff 89 de e8 ed ec 9c fd 84 db 75 e0 e8 04 e9 9c fd 48 c7 c7 20 de 04 8a c6 05 b4 60 a2 09 01 e8 7b c1 33 05 <0f> 0b eb c4 e8 e8 e8 9c fd 0f b6 1d a3 60 a2 09 31 ff 89 de e8 b8 [ 548.274893][T28000] RSP: 0018:ffffc9000520f7e8 EFLAGS: 00010282 [ 548.280977][T28000] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 548.288952][T28000] RDX: 0000000000040000 RSI: ffffffff815f0ad8 RDI: fffff52000a41eef [ 548.296932][T28000] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 548.304914][T28000] R10: ffffffff815ea87e R11: 0000000000000000 R12: ffff8880514b65b0 [ 548.312895][T28000] R13: ffff8880514b65a0 R14: fffffbfff1701e30 R15: dffffc0000000000 [ 548.320888][T28000] ? wake_up_klogd.part.0+0x8e/0xd0 [ 548.326149][T28000] ? vprintk+0x88/0x90 [ 548.330242][T28000] ? refcount_warn_saturate+0xbf/0x1e0 [ 548.335720][T28000] vlan_dev_free+0xdc/0x100 [ 548.340241][T28000] ? vlan_dev_netpoll_setup+0x120/0x120 [ 548.345815][T28000] netdev_run_todo+0x6b4/0xa80 [ 548.350600][T28000] ? find_held_lock+0x2d/0x110 [ 548.355382][T28000] ? generic_xdp_install+0x4a0/0x4a0 [ 548.360686][T28000] ? rtnetlink_rcv_msg+0x388/0xb80 [ 548.365811][T28000] ? lock_downgrade+0x6e0/0x6e0 [ 548.370675][T28000] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 548.376947][T28000] ? valid_bridge_getlink_req.constprop.0+0x600/0x600 [ 548.383726][T28000] rtnetlink_rcv_msg+0x420/0xb80 [ 548.388684][T28000] ? rtnl_newlink+0xa0/0xa0 [ 548.393198][T28000] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 548.398518][T28000] netlink_rcv_skb+0x153/0x420 [ 548.403301][T28000] ? rtnl_newlink+0xa0/0xa0 [ 548.407821][T28000] ? netlink_ack+0xa60/0xa60 [ 548.412426][T28000] ? netlink_deliver_tap+0x1a2/0xc30 [ 548.417731][T28000] ? netlink_deliver_tap+0x1b1/0xc30 [ 548.423038][T28000] netlink_unicast+0x533/0x7d0 [ 548.427914][T28000] ? netlink_attachskb+0x880/0x880 [ 548.433039][T28000] ? __virt_addr_valid+0x5d/0x2d0 [ 548.438084][T28000] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 548.444350][T28000] ? __phys_addr_symbol+0x2c/0x70 [ 548.449402][T28000] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 548.455138][T28000] ? __check_object_size+0x16e/0x3f0 [ 548.460444][T28000] netlink_sendmsg+0x86d/0xda0 [ 548.465229][T28000] ? netlink_unicast+0x7d0/0x7d0 [ 548.470177][T28000] ? __fget_files+0x23d/0x3e0 [ 548.474874][T28000] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 548.481135][T28000] ? netlink_unicast+0x7d0/0x7d0 [ 548.486087][T28000] sock_sendmsg+0xcf/0x120 [ 548.490521][T28000] __sys_sendto+0x21c/0x320 [ 548.495303][T28000] ? __ia32_sys_getpeername+0xb0/0xb0 [ 548.500689][T28000] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 548.506713][T28000] ? __context_tracking_exit+0xb8/0xe0 [ 548.512191][T28000] ? lock_downgrade+0x6e0/0x6e0 [ 548.517059][T28000] ? lock_downgrade+0x6e0/0x6e0 [ 548.521937][T28000] __x64_sys_sendto+0xdd/0x1b0 [ 548.526716][T28000] ? lockdep_hardirqs_on+0x79/0x100 [ 548.531928][T28000] ? syscall_enter_from_user_mode+0x21/0x70 [ 548.537838][T28000] do_syscall_64+0x35/0xb0 [ 548.542241][T28000] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 548.548134][T28000] RIP: 0033:0x7f917444fae9 [ 548.552537][T28000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 548.572313][T28000] RSP: 002b:00007f91719c5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 548.580712][T28000] RAX: ffffffffffffffda RBX: 00007f9174562f60 RCX: 00007f917444fae9 [ 548.588771][T28000] RDX: 0000000000010a73 RSI: 0000000020000000 RDI: 0000000000000005 [ 548.596745][T28000] RBP: 00007f91744a9f6d R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 548.604719][T28000] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 548.612687][T28000] R13: 00007fff407a0fcf R14: 00007f91719c5300 R15: 0000000000022000 [ 548.620660][T28000] [ 548.623930][T28000] Kernel Offset: disabled [ 548.628247][T28000] Rebooting in 86400 seconds..