', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001200)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRESDEC=r2], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)) bpf$ITER_CREATE(0x21, &(0x7f0000008980)={r1}, 0x8) socket$inet6(0xa, 0x5, 0x801ff) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000089c0), 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) syz_genetlink_get_family_id$mptcp(0x0) socket$inet(0x2, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) [ 166.512519][ T28] audit: type=1804 audit(1600490869.158:12): pid=8962 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir643369579/syzkaller.bVHPp6/16/cgroup.controllers" dev="sda1" ino=15870 res=1 errno=0 04:47:49 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe2c, 0x10, &(0x7f0000000000), 0x32}, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000140)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002340)={r0, 0x0, 0xe, 0x0, &(0x7f00000010c0)="378c834b67a98a188b7730faaa3f", 0x0, 0x0, 0x0, 0x39, 0x0, &(0x7f0000001280)="f85144102676635f7fa2d4fff0a73f90091add76fe0f899a03d5e80c31b0a7dc2450daca216bab57165af1cc2debcc5aeb98f94800d92b348e", 0x0}, 0x40) 04:47:49 executing program 1: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, 0xffffffffffffffff, 0xd1357000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'vcan0\x00', 0x200}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890b, &(0x7f0000000440)={@remote={[], 0x1}, 0x5, 'ip6erspan0\x00'}) ioctl$FIOCLEX(r2, 0x5451) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000240)=r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x6009000000000000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x6, @empty, 0x80000001}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}]}, &(0x7f0000000300)=0x10) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000400)) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e24, @private=0xa010101}, 0x201, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)='ip6gretap0\x00', 0x1, 0x3}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) socket$caif_stream(0x25, 0x1, 0x3) r4 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffff9, @mcast1, 0x1}, {0xa, 0x4e23, 0x4, @empty, 0x3}, 0x7, [0x6, 0x0, 0x1, 0x1, 0x7ff, 0x7fff, 0x8, 0x1]}, 0x5c) 04:47:49 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x4}}}]}, 0x3c}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)={{0xcc, 0x8, 0x58, 0x340, 0x381, 0x80, 0x309, 0x3f}, "684f3e3efd888bf206e658a0f85754a03b154105d94e7c59bd1a1c130029b94039dfad2fb32262a88f85ed46402bbfba78580504ab58b179fad284043f98b498bd91dc82014d78d3c600eabdfc160eb47cbe5d632c61227ee57679770a713e9f6d885ae97e077525bc8cf534b7ddb5423f8d10689a02decc46d4d27eb9f1a265f0505dce31481bf4986a6305af037f8d901d69bdba386c62eab28db5a85ea508864f73bd2b5452ecdd962607", [[], [], [], [], []]}, 0x5cc) [ 166.867726][ T8995] IPVS: ftp: loaded support on port[0] = 21 04:47:49 executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000180)=0xffffffffffffff9b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000240)={0xfffffffffffffffc, 0x8000, 0x2be20000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0xe00, 0xf000) socket$pptp(0x18, 0x1, 0x2) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FITRIM(r5, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x2be20000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200)=0xe00, 0xf000) write$binfmt_script(r1, &(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRESOCT=r2, @ANYRESDEC=r5, @ANYBLOB="bd1568c43460e8e714c8c377d1129ce8276a983a2a26acdec30489f33003441821279903ffe9cf599245f139322c211613acbc131e5cee2bd1fc2caed5740112b3c996cc8ead03f3c6fa853d40aa9516f580fd687ab76a26800bc3ee790cc68e607ddb8f527a174995b2cc35516aad4d201056f98f8fe5a8f2bb54f964f937e931e3e148fa62633d0ee9fd7361b72f7d0baaa2d628f0a1a93ae0d237a956635ead4aa02c98075707003487752373a8d4ddf94ec872416e18ee76817350bace4117f9ac5e2ad6cde4eb2a0f66bb9d5faed1381f37699c6d611c3378fde6ecd9", @ANYRESOCT=r3, @ANYBLOB="b8c94d9651da7c8c73278136d38181b83c7d071dc23e6dc85b77d805cca25be6b0c71b4e61000000000000000000", @ANYRESOCT=r6], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)={0xa8, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7ff}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xc3}}]}, 0xa8}}, 0x200000c0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000300)="ad7775186da2d1273e9cb653d7639ecc83f63a932b1f86ece857dedffde1e42447a5214efe4e784a95650ccf9fc230c3012b4350677bacba8cd5c79b032b36a4feddcac0b07c8d733d2b8c26b1e5887d194b23f879680747da9d554f5992f2d50c3cdc3502c86cc1e217cb4b22b8fb941790cb5dcd4a97421ff719c946570f48cb4fd937a1f474661d8733062e191d3c0ffca860bc27675ee9a429436d3aa8f997c1023cf9fe18a5b8ebc641fe", 0xad}, {&(0x7f00000004c0)="0d5056aa3536ec4ad1f5574e98db6eca1b9c39ad211c943374734c194d4846e98834c590485d4464dbbe3193f04ecbb9fabc76629280e7f0763d4bcee70d22f4fdab5f10ca4d3997e9b0801f700d87a4ca111a96b925a458b9e6a025e4fb7d70ead080f4d6992773040d4d60464a5a5542816ec010fdc0ad6fe62daeebdbcb579d7556b5f7b628faf6fd4494b8ae3aa9056499bdcb48327c33b0f28c46d582dd2dc15b6d8d2e48e8823e2b26a95da666fa939354b555fff79a8da40990b7887112f062ce21bffb4d1006", 0xca}, {&(0x7f00000005c0)="3c6af7531533bbecf51781b0cd042c2fa2302a0280b3c0430bd6e16fed008338ab3bd0efb062ea4d5435ca5307f8ff827429e39b96021757e0c9533ec033c9b2656a1a002634010b6c2a1ad37eb65b2b9c287c994ae093bfc3504cccdcefafb1a17f2884e4c0489ae60defda4f621e5b26eec6f7b7ca7c5927cb761a40217154548afb77974bada0dc84dffcd0b5360acdd4a567add9fd57886cbe030398b4cdc654515203b721b9e025a23564282c29bdd8470ce4ce8acb1e8a765d83fa5c1828", 0xfffffe7f}, {&(0x7f00000008c0)="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", 0xe3}], 0x4) [ 167.013790][ T28] audit: type=1804 audit(1600490869.658:13): pid=8996 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir049987834/syzkaller.1tU8XN/16/cgroup.controllers" dev="sda1" ino=15860 res=1 errno=0 [ 167.168778][ T9012] IPVS: ftp: loaded support on port[0] = 21 04:47:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010020"], 0x1c}}, 0x40841) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') read(r0, &(0x7f0000000140)=""/4096, 0x1000) [ 167.273244][ T8995] IPVS: ftp: loaded support on port[0] = 21 04:47:50 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xc) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x13) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000009180)={&(0x7f00000002c0)=ANY=[], 0x6c}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000000000000fddbdf250a00000008000402f8ffff196f3788f6f671598e2bc4ad02800c0001800800090076000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4003) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, 0x0}, 0x20008801) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan1\x00'}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000580)="1ee7f5c114f301897833b4ee5be81e76b0076a46b2f7468ac5628e1a4502b57bb5f20e619b8a81fcb84e9ea4131068bf3aed3b7f0e007ddc92d0785cccca837fb113143bcacf5837ecb45ea8cec8471e0d89d488e6d3c581377665cd9521f2be87e400768b0b1de3b80e0aa35daadea65ee311e7250176bcf7c2a2acf8c1599c8dca183eb4d5337526f9d9e845777c4a9aaaad56d2312b5fe498fce90a66ffadc8d2308fa680da948fe4ea290f5c7fd8e9b3ea5e7903e5d594493ead330bb69afbfe0e6b6abb875ae494983d07f6ad0f205c78e766519378c4e107daea6c96e9a4670308823ca2dd0833422d9db3994f3e7d334239a907c30f07719b225ab969f2f94f771caebc2a93c7eb7e3b1bc89cf230e44b16c1089a3650854aeb790527e2ed4cf2423ae96d49341984278612080fa8e37f942157bf6c91c5624514d54a81b13f59c05b2fa88691e49febd3783222666f2fdef3c186d2351aa606799e81ea0fb2e5ec9fc177a5bf680a2d762ea95132d0f6a03c26ce673432fa6e2a3dc43382ecce2ac519f2c6b46be91be490c2f8fcb9a6e8406c539141dab66863cbff550b2c87cb28579e20aaa73cd3b31fe5727fa1ce0f3553eea94404c7c57eec102cdeba890c61a16a193dc547cc0bb4e47fa3ff2a4688595ea0b11ccb246738dfd6a1c3068d96bb66a5dc78beb2e393ceebca4f0732b105066a1c245ee81c73d596167c0fc3e951dcac688e3409540babf69ccec8bce750e45b3c4d6e62e0a5e29bc0125425dfddd6be09a325363b9bb828e6fe6872b56058f1132fef1c61c1f236c5a06b27537d71a850d604c5219eb4df9057354cef00e70309da12e213d9961917278423df7c3ab98624768f25ef4e88555564dc322a87d934d9ad0de3f1e39c5f946b802139de1d05d9460ad7e978b26f01facea7a2acc23f1137b39f6442d60d38847641775907f0e9a97fb082d8882993135a90a98e1585783d5dc572a7c973f52cd92d190cfdb4e76171a4244af33ec5e08b831e992cbbeabe0826a842ae97e1b3007afe805879996243a1b2d38984f79638b8f59fffa2c58325b1905ba01c59f6880d4694eb554634ba67f55d888174f612a9bfe525eb15c140bfee07a90507398443413579f37a54650fefc53f14a879a5b857a1b8c6e38e91cc2540202cef81a51492698c3440cca2b6b100706a07da142f168d7819ebf95e7e8b90ae2f0873e3081a94aeef87152dabafccc7fd633e452b7ab28a3ed00ff0944cd23cd547989fc6a073bbf3b8013420eb018c7fdf288cd8e1a570e2671e5adf216b29f1c9c256fd50293da7dffd0b2cd186a8463c177738c74a8f2297ef231d316ce83b0f80b31c084f4d7d8fa5b38b6fc3d99969966900fb80412faf568caf6858cddf0df0a6a475e54e97a406a399e9a03e683ecaf46dcd8fc1333001c60fa107deb60bc3be8f57164aa6de9837459703db42ea692cdcfbf0d9ef1c0bb2a678223b430a8158b413d823eb32e2cdf4a46daaa92f4dc2dea2e1e695bf9fbc9defc666031a350f611ffd7e31849571249b110b6f342133aa1bfd85b19228e9168c4716ed79cbc3660bc3f5074ef54d6a2a812c7cf8c45a34ed75d0fc5ee9f6d28d4a8cda52881d230238bc2d64074a8b4d74b93a3eba4d001f9287eae3d563f61221c62ceb067b0a4989f547e62c40f89401fb812715b256e4533218b9c110e4c2eb9ecfca5ff7f47280d0b3982614136cbac13da0ecb2dda3e183272b9d88a56f0b236d05eab7a2df18861b75b92d75271ac8cfdadb98485038255fcf58a507dbbfae77ecb40b6cc6d480abddafb148e82a3172c96654681e6c9bc2e33c5ea9ec6076d06fc49645e8f9a5c1508eb0d7f16b6001239604774e3f930da93b08753653058c5d30c8c05ffa5b7ff803406f71784a5e9953ee05011e9f43b4aa4701803b2d6565bd2e793f0652cbe64d90de7315c88be38c74824b31ae0ac98eb53b72d38633b57c079c6966694b50c3f9e597cd5e3554f84175c4baff9fbcf5d46fcc6da1a8bce3cfe069acc7c8b7868c14f6828bce0600359297c1a2e14045abcc89423004f40b1eccea9343b92ee66cbfb18ae8020d108b71a7fdbfa1c388bb61e5a88f09d540b353505ed53b295fbd74a6fb8b029692c2984750faee3ad0994fe1510c919130d9e8728ee0045dda84768e8305eb8e64edd2b656f7179b00cde3b5d06540f27c825cb76cea2b6897c8cd6dc6fae066d8c591c62a295417dc3d1830bf4b6df2c93a7a5c9cd638134dd4f11675bb4356519d954f212e8c81be12e276502e552157e3461b4bc57edcecf0de045b7e17ce92992a6918f56ed799f40900af58d30d3c41875a6e1ce1ec968359a91c7db681775ba97e50fc29ea0d61e8abfed0796b6459617243eb84342d1a6f80d7ddd5c9ef8eeaddee5e5af1a09c185b0c6f0499ca6641558cc9f0d68eb0d64db5be28c84f3f0b42bb8fa1a324b9fa0a3d643b8a2b338daa632a23a90d1408d69ee3cdc42340d3e6d849b8118c55d0956c287608129c0c223d97e11b7ac92d50ddd334a64486bd3ca4a799c56dbf47612d53d04b85585f52870a8f3eb013399d770e062ca559253e3a9415c8f13c37d99033ffcb1e7aa4aa4d459e0d45526533f88e25498a128bb382fca690b954b0b1c5eda8f861bd646ad0cc0b3c3307fa0ca7c2f8bc75bf02b3b70ea9bb3a96dc3f7b2ceddc64d882230fd946fd8770e67461b07c6912b38fc7ee7cc61cf50cbaacafa9dae74938baa4d9d0f42c2b7dd260f55d69cd59695a801286a02e7b2f9babad3c4392f869cdf130ba44a7817f102d249753910d4cb1720496927f8bca22aad4e974a5d0eca972ab06e0659c0a50c76873b833cca0f848a902e7197d7de17677479fb19304a97fada0003e9da14b52213b2f773ea433cec51ed827c746526f80e1c83fc51071507f5ed580322c70d14a2f61e0d6f7ff5c1229cd18f911f9e12c81e446e0f9aa841375bd748565e3336592ca918eb7c1f4a53b7f6fa79433b740891f552272841a938659801430e334b6b07b0ce53374ba61e7670c0916bdcb72e8b4743ed1766e9de27740830803a2395c93c5a1f69eac4c63f1233aa0a0a5bfcfa245a48c102c9e269013f1e6232f68f2ff2b85de88dcd36551b33e0df4238f4b7fc1b0a085a64590638d1e5a33f629c50bd52b23d3e6e69e92de9c8b7fbf86f8a48fd295a7208ee5832902e5733f278b6aec017a6af96fd5f0edc684b64f98e2de1d8d2d123b342d371434edfdb8544c118f3f7de298de0791a1dab5fd57c226d4f9dd80fabf97b5f466d79d94082ea9a9187ed1522de02101fa392c37ae3685ba8d1364a1638736d2da2d02e898c5fa450787b3df83cdcb874aca56fb4f5bdc9bdc2e9ad9fe8c8656fa38d4e4108a743064dce0ae29c12d4bc7405b91108787fb01644486fbc4f025171f43b434d978155ace6410b002b3ab687dbbe293d63927b13f46a0ecf2eb713776a0d49933e4182d583040922944b64968a197e81d10ea61e9e94858a8dea185ba39199ce58707f481b2533db5ef4c9d23fb99af2216a16fadae47e2c02d9b194e82ffe1700261b643625c959d54027835bc9223e90172b424bc1e43c963011c6b99e5acad01af3887e7ae25c2d55cb343cf98abf597df0af80d6f125223af1320ebe321ef16b7e1468ff2ff5629358030fa4769f1a34f79042843fe34c0869d048af49f21efb9862d0bad4b656e4f50580e785fdf64abd80c30338c23ce0924eb15a81d8b8a53d98161689e1c65ad1d418b4465f253b3f5744d312e8797ae7ef4b02ddc3fe967d2f964a1982492091f291825e1b6bdbff55379e92326c02831ce60ee4726a0cab569013b4627715b18ccaa581423533a3b9fdd4bd31883c5ca7a4bd64e98991dd0945da4a93f10eaab9b78048b849afc46c6f821f0202c30cfa5269ed30bb5db43664c5a9446b251d6baef27bfb013480643538efabb2d68f35f58ecfa15e82df792ac98f2a91b1740295fbc75f72cc360d80c8ef3b625627b0d77c5c271016d0a2dccf356b1e4014c9ea0aa6a1994a58a76edaf81e4da523765a43a6ff55c8f50f36e21b3d424ae4d22bada8c82ff0c46b44047e2799c82833d55c7cdacf0f4eb56eec81194b56fe4dae86d6b435f8430597c21005411cc85bbd594730f9b6b32c7c77b11508892e7aa2b5f6462f9767b379ac728cff76d362111b1eadbfcc546a932fcb6eead0af287cab04923c17df8504200c7cc7e6b94edb1bbe38953b7161b4e060d01644a05260b5c5ed5939a82141b59699a65280aee4facde049af4cbabd7a924a3cb95ad8a88ba750c33671b8907384c80b7e9c7778f895aa4c940a03783e6b83e7277d095f640090b004a16e1db0440d04ba0d27a43fba1fcff2044132b4a43e302c28577a626e8d813701bb874aeb4834dfe4fce9e811b6c7b4be9ecd2824dd6e65388f3f8c723706710b40c12b2eb16d64119e70867878e3137932e626509b7d54fc653d501bd658bfaedf8c5001a3444c98fcfbd0a5d81fb40cabf4c7b78298992fd7f033f85175e156f5a0bc6afd1d72697729fcb80531b80a487e4e62d961e47c5459a71904f87d5d276dcbf2084f8d1f60830e73bd4769bfe5ab9e11c2d7a9cad1f3217ad363d492c644d7c8da4afe23eb654e89c473d6693e6b6b47efba48451231330639cc38f474494facfe4ccfd630d79cfe116d7e9d01cc44d60bedbd0b571d0a4acadde04e07d8257ff3b033df11c6b45d9a228d0df7486854451bbf63c4a7fce803cf946e73d341b6a6f13d168ac1679329eb456d7671308f466d423b93ff65d322fb5828f3d7bcd3e7b3edab2e0dff2dd0c9d5fa360a5045b072e166a78a37d5eb3519110a0bc561b2e1a515d3d199872bed29628b9ec1bb1ff3591672f7a2724f12786b7b76fcd5f527cc0f8a2ba7234e2a6af08dd7cbe9ad47f2449524d2b4d80606134e4cec65fca19a2841b0c671d8143722bc03fed54d6f4dcacdf759c2b9a58a6f57a7cb9362efaff5783b4a62649a17010f4df5ecc1637978d6915b84a96beb89d2eaede837568daa663d4fe0c5f620a387a414be97defbe842ebec2f3a393d039131c8c1adf2a6fbd672db32dff65f4202e848f5864860963fd78c91b6c3daae5faceef20aa79c6e58cf75ed31a30c4f1bee658bf3604c05cf0678b866605d0dfdea06089ac4f9c9b48c85001fb7055b91323330bb0f20e70a921e9fedd56b4417f65e5d5a7a70091ad74457a5ed496a43bebff391df1a0c804640170852fed4f9d67a09ffffd855f06b195949f3d10728a3abca346a504b4f06adde29cf25bbc1b8f67d57115980b51b9d4b97eb8f38f964ad77e3519e0f55a1cc9cca97c306af1c15922999f83ab69e9d31d27db236641f6f4e3c0c0f77f5ac239bd845e10cb1cbb8e30a33cce092c34960b6516623f8215db75a2bd2d1f40d4654d93343481153a62d0e14fe6c7b516f997693f922af2f539ba947bd78ff07edae96b4991586dab11330747c4bfb7e6141158d3d1919bae4cebc42fcae9f9bd5afa97aa780986b9b63d8c3468ced5c048a15d4fd6eca42c011f647c050e6bec74fedf0050d33b6a236f0fede42adbeefa8b27ae3529c704aa36919de44a107cf48273a4bcd3d957556e4cef5a4cde7d97a025dc065563a65c067423b7c55563e3c54922cc4dee577837e22158e594e347e980fc95bb6120eb6f03878011afcf17880b10c8944cec66069887771e0ef28f879f3fa4ea570d7359572a07b325910d", 0xffe}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 167.835979][ T28] audit: type=1804 audit(1600490870.478:14): pid=9058 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/19/memory.events" dev="sda1" ino=15881 res=1 errno=0 [ 167.977672][ T28] audit: type=1800 audit(1600490870.478:15): pid=9058 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15881 res=0 errno=0 [ 168.153857][ T28] audit: type=1804 audit(1600490870.508:16): pid=9058 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/19/memory.events" dev="sda1" ino=15881 res=1 errno=0 04:47:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000507000000000000000000000400", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010008105000000009bbd0b6d699849e2", @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100040000000c0002000c0000000d00000008000500", @ANYRES32=r4], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1c, 0xf}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x20004010) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, 0x3f7, 0x1, 0x70bd26, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000040) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 04:47:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000001200)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRESDEC=r2], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)) bpf$ITER_CREATE(0x21, &(0x7f0000008980)={r1}, 0x8) socket$inet6(0xa, 0x5, 0x801ff) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000089c0), 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) syz_genetlink_get_family_id$mptcp(0x0) socket$inet(0x2, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) [ 168.328975][ T28] audit: type=1804 audit(1600490870.678:17): pid=9061 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/19/memory.events" dev="sda1" ino=15881 res=1 errno=0 [ 168.400640][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:47:51 executing program 4: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYRES32=r1], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r1, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffc5c56d159e56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4b10dd5cb8b24f89f29ceef0a428124dcefb40b6b8ce6222864e92d22b053bda211a0aa613e4d66c8a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b9"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1}]}]}]}}]}, 0x50}}, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000380)=0x9, 0x4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000400)=0x7f, 0x4) sendmmsg$alg(r2, &(0x7f0000000200), 0x4924924924926d3, 0x0) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0), 0x10) [ 168.611905][ T9018] IPVS: ftp: loaded support on port[0] = 21 [ 168.789905][ T28] audit: type=1804 audit(1600490871.438:18): pid=9087 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir049987834/syzkaller.1tU8XN/17/cgroup.controllers" dev="sda1" ino=15878 res=1 errno=0 04:47:52 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x23f0, 0x3c, 0x8, 0x70bd2a, 0x25dfdbfc, {0x1}, [@nested={0x2ac, 0x64, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @pid=r0}, @generic="ec6fb6f048bf132cbd75c50da1ce678b16bc9408f3e9c8455e32d0c59a532dfc3721aaf2aa9b16e40466e89e6fd4563fd9b0afd1056dffe781a4caf38a4af03be65b16efbeed6555e07d0a604def6b2f5871c707889fb60b8f40942c566c2bb439b48fe632335b62521fba8db33ae1da0d12e5924164ffadc28180a64baa2b8a391120e9ce8332c008f5be192759e3346313288407035b9d1c700d33e98bc90c5e09006ab1d576bdcb1532c0a7", @typed={0x14, 0x78, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@mcast2}, @typed={0xc6, 0x38, 0x0, 0x0, @binary="ec1c2aeff5ab9bc6e5dac14e72cd28010e5907ae2a2392916963b543e85099ff6a8aa30da773c9c6f13626f921113d1f2d9538b429892ecb47820ccb7492e7f3176de1796995f96feb306e599bc0262d9515ed52a767a2434b237abb7c668b319102fe01964f8ce58f3ba8cae65ce4f4986b85c3a67aa199b9c14e5ae39f495a2a5eb891c65a1b48013cec666122cf316a636b17e5d44426101fc04240f4245bdc7eeed95c26c8dc464ffbb63787905640024f2a438c618f516c1f478ce2213e5423"}, @generic="1606917c51727b14c98905e5ff094be66fca58d1d8d2bafa8a482179333981c71fe72d565fe3829e9394ac73e8bdf9a13fd159b653efa17a3873fafa75f5de03f1c20e6b0c6e530e2fc85ac49ef35fd7372efd9974b80a333b28818995262b4dfaccc475fb7d78cfd125e561e39b6d13a8073ee90db945cce9a4dc219e3590dafddb1fc9efeabb9fac5fbf44b9e367d71811ff3cd68ef5ea5ab5a3d153898db22c371d4415ab8745185bda537e4b2ab9e28f5a4f83abfaaf1d91ea6dc968ae4e8529783fa3a3b27617a023c63395c2a65ebed0f4594bea14909d3431b13901405e31cab3eddb0b096043678c49307d", @typed={0x14, 0x93, 0x0, 0x0, @ipv6=@loopback}]}, @generic="0e067a47761fd12d14f4cccbe54888ce9804f12987a30a1d313b6c350020235a3f030b2e1d4da902ae2d6e1a5cd532cdbf98c4e22f60141453bf92e984db50f24285d62161822d311422cfd8126604ea927210caf02a9fd58dad2abd6b35402f674a4a2fc7ff505a41316768d97e01afd1b45b580d586b4eccdcf137f0c526e2606af4d6794e34d29a08e28c832c47acdb4aa3aca8bbd64eb4f055a94db1d95f7109ff9003446264cef4e51af615e27a0694aeabf1d0bc6981c748121cef08887c61c0cb2845554513f6f734f6d192f5ecd18b96cae3f8198d5b2c05add7cd186cb57f78802a7defdb99547c4d64d9ec4719790c9c0b5e45fddbd6150c435ec1e429a1991fe35da873bd5627365ec50766ae4fd471d5d863f46f1014cd2134ef2fbbd42393eb0f2102068092451fe1669a3427670a9b3b835ed5f54b61acd1e80447281b2332b03f57df21223af1fb987f24a615768437d50e74d8beef19f7803c05ee2493793085d597f8112c368e12073a0545b90f21ca8e7bb32e88c1ab570fb536faeba104df3689d69276c11edd35500b6e0fec482e478fe7e67d463ab2b8499db1dc71169aeda84f2ce17cae72d42a1433cb2cc5ecf9f41f3315c3d95876830c7e7c17b61d4c1c345bba232df19635a78db4cd2177e44987d131d2f05ce4d68d2a4229a33dd370c3031dbed609effbaa6ad335cd4f42642606a985821d02f2a1be24f8e5b2c348068ff79c9dae458f2450b7b1cecb72db6ca5ad5fd604ab0961c5ec12f99e968931b7738cf228497ba5e9b3301f40d33c08c1f177ea9453753f30c84d03c7cc8f52fd0259aa9ea4a9cea0f308fff3f4e55bbe98e774099efa6c1d3448b24cc9da40be0678e790852d2f76c79e9762c141cdf9315091cd15136822926212cff8fc960f04ba8e6befd397655a00b6589fc8735a6ec7b461620c726cf13d1e5c511668f94c8231cd24c8148edc7c47a3471766bb6222ab15bd1e59dc321c86061e605df9b11672ab0cd2dc1ad7e86582fa3e532521e1058e5c8a0c21dbe89fbb80c7d50bfd787ecba6878335e61878582d281a11b5f61d4813ee8baeae36999b43287f1c1c8cff88b2b19e938fe16267790b5a237e00241910065b4d950df7e2c2691062764054c2d536a02ba9e42b86fac38edf8f40a45fddc9f325133120fad927b85525ca6331aecd81dc3c279200a3a2a45f41611a8fc84643ee8451b072b14a0c911c5defdab8edcfddf20daba6bcdaef0de03b67174b5a50c261d6c0996841d4121913b62b013d7a72becde571a5ee48f7bbd5a293b218eebb970b3f0d37c0ebad4b695f33860821e8f129122cd029d5571344026dd313eca8080c011c3b402893f2f134b24fc36313eb53e71582d18fe5bb5d6e816043ccc7bcdcc89b0cd0d1cae640be3bdf67f91c0d2417e64b68ad5351382b3615443960a7fcb265017d55fb8d6369f172272156da74239390635b95dff5e4760bbf301baa45feaf84ae671546acf2bb4fb7930f1ab785db2b493b4235679c39996261e2554c22fff7bdc7ac9d654a935a8833c75be180635f002e62dba7e766244f8ba6d522d95649aa329cfbde0f5f1fec96fb9f521c224e1df0baf1f2619ae419b3bbf0ecab4230ee92629ad263b192f14304f3811793d67003c58903a70aa1416e42c0c195b200f8eb4a506673473c81b8e2c397ff33f2937e8395bf73fd2df2265631a475dc0710e8dcd0fad5889a0289b4469f6ec35e08395ae384bf49c5b8e6f676fe23df1118e0939f4ac85d55f8a927c8723467647f2b3f919ba1204751d4ea592c8068fdb361fad582054fff29d315dceea0f97d6739b71d39792710cc035473617b41f3ed5d0dac52a1f148e7d9070310c7f9edd7d388f64c3b4e465cd86ff7b97206a3015439bab33343c11d9847fbcea5502711ce7ca3bbae5e82e537e2fef57cc48bdf1d4aeeda2f9918c2e31a87378a5361a4cdb19c20f81f667a392c089634de8c5e8067fa46b537d184455ca01c72a506bfcd22a33e31417b86175735147cf1bb8fc6298fed3456d7231daa6953c23955a5572dab6bf63b8d806f3c337309b07eff249be1849a2cebfdcf1963dd4a32b7f61ec817381121e2ebc5ea8a0639d605331b526d9aafc187402aa4c45b6fc8cd5a0f9c6842dd7a7544b34032087f6b284f2d77a9f0ce2729683ac6146b585192d20b753fd8efd962ebd1db22de0bdb3aa6fb2ca952ecc9ea74dfefa85a76fd1383d3186a1ad4023414af95e3ccabd3cabea2bac9b4881ab64078e6930ea0be6e5055a671e6ea4888fa7d3f44ad34a6cd7c0d5ce00dad2186a33c125721880c28e775fd40d3513b5948dd8d6086e60e02c9b9145d8fdc47d7f98954e38e726028c8a0b6ce967f4f9932679ba9c21b6a63cd6b6a88edd28bcaae4d7238b677dbf1e9f1a1d0775458a663caf2cd43a90be48741530bbbcb1528247b0e8f509658ce6fb9168d431f7f459fb8bf050f1f7a204a59b89a7be9a41226efb86ba29a0f4708f9a55515a55102f583eb665a0e70c0b9a46003dc8a1afc2e2676d8313c72fea7d3c2371deefc194fbe6b6a89485f627aaedb6f14618adbeb9f187a91a16ae47301dfb0689cb181d16a56eecb398815f3167363327829fbdd3b780717341052f5fe33556ad4cf6b8b2ad21214779d71d04b2b287735e9725b105a2ee4a7b10e07342b955a34bded8af8af74d2637cfa85f4214fe2c49923324fe19d277fd4e6d552b06199dd22a3af68810d569415627c015b6901d9406c327a62694f12427c324a0e26364c547101914c68b57b03bb0e34e07c00116c1b897e512957970bafb238de7403db3190625083a5c42f23b64fd6b35c437af0048afc58db78b4253aed6cfcf7ccbc642a2a7e25cde793559e0d318992896c7d741fa0ed3e2893631518e650ccf918189a6b6b5aeae1e2bb712342b447d149daf9e9682248b5bbff568142c61381354475a0d62a1eb368a79dffc66f79602923f2ac752fb15e9407e225907eb640adee6dae1e6e8087835c5f7f6ca7242492fe38a5513e3e6a650a707d458a03185098d54437333839c0e1580933dd7d81241f32cd7aa009ead076ffce9e5e3c23e4f9add3c733ad49fb499288901b64e9b394621c96fc90ae140366b7227341544a623be971be109df5e0be898e2a1bd357d2f8ad14e86df0c2a3ea300c75b3cd3c6ab4f817ded8106599d569c7966d504bb22b1ab63412172457eb5705a54adb9214236b25a61bf7e218f3a558f4eaca588613789db6db44c3853f8faf0201e7e213e03e126d30e83378ea566cf20c970e403c157afaab8139b02a2a39d0f866518f79b2a96d316830dc49af39dd41fd25486b645942ccb9c3afaf97a41b841fb12c187698db89c0ce55c08785935b405ba91c9425f6a0bcf981043342a3c51221ab4df711bcc886cac8841f58b59e65a22b84755cb2c4daa3a45559e9e3461a33a5f09d23686b4273e56a15410191b44ddfd7e94bcf4ae15a4e3f90bbe68639b81e1f8deea810084c86d3b1e24bea773ebdbd4b439fa3b74f04e7f3b424855091455cf15c88bbd06cbc29df525b577867609d04dab50558e54c6f2719282f4b73ee62949bc38aa72c86d4edb36ea7231cff469ece8ff52e395e4b3db47f2a361ec988a5c4056b57477f94736f2b021253fd9c5e903cc5c7f3e32b2334e0f5e7c99fa28d991fbedaa5f0ff01de951473575519750a85e5e68e6ac9b5ac31a9fd625073e98a2629600e61bde12037a5f19c264cb963d7041d23e36da7d8518c7359f51487ef10d882776aa447e889750eed1a95b6195a7184852049c7e56c36d4a918cc5b9f7b662c8141a41bc862436f3d265266ccd5c6ff4a560afa94f7423ea3bb8ef557cb56cd3ebaceab38e00a1838f1c471cc2c137612bc03193be6633b101301f57e7cd96399a80e1bd032a6a96fc312d69166738b476b8bc73e8e7f3c721533653788ff01a277d4ff437e11e2dfd60bf9902c729eaa923df660f5c3f28557e9b85cde2deb0ff8e8da68d052820817779d8e32f52dfa32b0a0e923f93f7d08f6b43d694d2b60c84df2b9a230409af4b959c1ac36e231914804a72871a7877bc13f1c267cc8ff811022aa96fb018475c910a0656bede54df16ce3211e88047c645e2694bf38950d39d999e4e99bb4960b8e829b921232a295de17e0f0c79d66cd3e244bc2a260cfd083a426695c1d147d259d6c3429db31d948374d81f59c569cea42559594540add908eef389de7bf50b4ecf7884f4f43ed104ffdf32bc485e8d62d95b3de3f97db5bceda4b066795895ea743577d08ef01f7fe174cd94f6060363efda9e671b181ccc9cf43cc1b49fe7f34826a594fe10890e5c9b8ca01fe63faa1a134be257e4320424b6d01af43a32c5800957ceff6eb9dfeed20e3c76508d4254a0362ea241102fc409c609f1a0dd06943c13277d0f0671ae8eda42ffd88541d4c536269057efc734e4c8da6ce198fce1154b5264abec4a1d4cc1acb0d1b8e150bbdb26c7ac16198e6347286a1dbf59aec5cb21cc0306eba8ecbb23a5723a5ae4075370332a373742b53471db7dcd7c40931500c2a847cb54e24cbad90fe074cc7cc438a9812f980dc3e1e1be80fffc24673b877c2b1b5e21b639193fc473fc4c47a00baf48ad59ac50ce046593c02309f1938ff885ec0c805aef51f33f128d90d6fd9bfad0aca5a42878a00a1c62d0c05fcf33c7cac15c40b0de687aa3e564b8b4fa8131e8d4070f0e1f0bcc66f3026b517467b28987f06a5877e15b13822a931632f24fe12bcd0a49690a7da3b9a3a98d54ace75eb50917b7c0e75d27f4459684463aa4ccf33e62bcbcc7a3bf619818feafef5a7fcdff13641d2e58f87756dfbfc63ae0f242794f457d53242aaaac00b39b8e51d1bab849125b27b7c55195ee817bd7b69b2ea10eacf66a7f3b0e551e423a7c84b374b9be5d3dbc2def7f8fe40d230d21c4c2e12b050a94176a09e6db7b5b2917b05f61b9f65439b80463694817e08c6b19c4b9accb617289e8bc9da56d7ada24fd2a2b68a8ca9471397604df2417a08cf0c03e73161cb0a9c598e950e364a0a98f64217dc3823e19c8c0882a19951fd1a0c3a05fda9f5a6d85e2b4ed3da9eec012edd3e631ba576a59c9dc5d99357dd5684665952acee139e0fe06500af6c1e26f611d31c7ee6f108107a97e37f46fb5042b41fd54898577452b4c6c3c29444b2dcb5fc9ef6cdcbde3598bab54d0f7d39c73e2a5e38f01588bce0750378ec5a99ac2214b4d81e3a3a16cff4c36e24dcf71f17eb20f2c5cd884dbf5c201a8f8d6cd1cdd3fe8fff632f48cd31a4478cac4748aa9ae77379aadb6ec50a53f6f97a90e1ee03dfcb1cb65d04b6aa2a6a222d53dc9ddc5012ebe57676e122f0349bc9f72056da657ff16e4b44390a508ddae046c246ce0ad1a96123eb5c6a7f434ea48d4cc1510cfd0f5b08a4a6566251c0e31d92761e56fa530bf19c4e4ff55a1114afd0ef56688f3cf2ee1822f0c8d4959276d7c9a24a4462ffb2a7cc3cdf1292df3c174c6b0847cb2204c6e9edd4d96e1929f050535aa77e87b7351c7f94d6bcc2a86607c02dbcd04296ca9d3f166cd6b2d2f34da5de8eb2933b0e5c4dd2fcc83815b8cee4b1dd4da14eaa6612d9339dea6d567cc7ab457ff976d45168c90e3d9ac747b193682f68984dcda628a083c4db5c9fb7f99eca093a5a48ca5c1ca33d34a92639e1dbb958093251dcc106b6a4089fb875e25bb5fd5e6107c5c2e3e24f3f48fe612f02028d673a", @typed={0xc, 0x60, 0x0, 0x0, @u64=0x9}, @nested={0x10da, 0x92, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x1f, 0x0, 0x0, @ipv4=@empty}, @generic="ad15839a95d3522830d0cefe21c3b0fa6abb0c", @generic="7eb8f379c77676e465188d532ff48b769713f5bf7e591b62ec3fff7dcdd351687c935cf7231fe4060f6c082c8b7d891b14c0b8be19e6d4d7cfe36b05692362a8a0c118701ab558d7e1af32b1c184055730d8d436e029d91fbc7c122090a0f0ebb12e0f66c14652c3e07e29994691368709f06c34e8100a8ddd7c6686db0086dcea019369ea34c877b7119c55ef6b96e770f2037faa2c2076fbe7509819cccfe0c612c7df3af2113eb4c1cc2aba79f0377531fb893008be475e5fe98221c7cf15b5faecf5e4c93a1cd54ab42ed0a92f552eec633966baa49d6ec22c469f1a9070f61e263c93352aa64bdfbf3f3dbd6b9d8ab2513cc72d42361986f0fe286f7f0c49334b210469c818e307d4d03afeef031fb8c24307a256bda7ace79825d956af61f37d7503ccfea8aeae900b7bdc2f5a0c22e9be49e4020198868b5e27df897bb76310ad192bfa84a7bf39d494a61650c0c2b2e144b048cfaeaa517cf52384b8fffd15b4487309163708e81a675cc3f5b29a1ce4402f607cb431d28441c519eebd2670000ba5d3b2f3e43d9442ab421da68741aad6c0e79a6b05b67be4a2fed1f6cc3fd57b7364352fc9cc0275676e1e8b2c24a113d7dd7e943189786f3a73660cc799c5976ea2868e10f252b1895f1ce25c228c78a9a597bb8d4353f9d9e4899ef8497fdda3ee4dc3a8a30700f724c2c1d2e02df3373dc95ec1c11af43a1ccca44f75341f176c8a347ab6f300b5d6b99c1efd85ceb46e45fa14487e9c61e30e34b5d7f03a5dc86d4f06d8887eba61aecc4b90ba251837ef640d2032c0bb622b011d7ff4d32c21eb15469c0ff8bdb3dba3e833deac3aeeab7f127b45554c829408b33b7957bb94ade83cfd817181991bcbf4bc930e63d5f5553686b5eeb9c43f880e924003253670e8bc5e5e02cbe02eaf75e58ae6e07ca2955feaa6b7a554e3dfbff75c5f2e97c84a9db677ffeaf92faaca021ffe559321b241e95ca366521f4c9b93e6e7659bbefdbecbd00aa6c27c5779fb82d5a1fb7f03f596ce523866491e76c60cc141205da857e333be90c1547ba177f3acfd19ea351441bdd3cfd8ead589b21a200575f28b2beb7b94e57292fd9fd9a53cdd5ecbea1efcd8bad0cb8cb38813e24f09d0448faf431928ccb611fb97ee3daadffa372f7b4c78a20e2a58cdf28823ef4fbf83ce234c5df02c58edde525a472215633a720644c47e77cafc0eef0937477553d2b254e3b544444fa24ccbf7431cae793c59cfd4235ac730fb0e496ac05f0c0c84a3e64201921d13d06172cddc240627cef6731b853d8b469891bf23feb5e1642461ce347f4dcdf515a591a13c0ca7fd46729c1aac9b83a2f82cbf7f4b93076bca299a5b51b9665c05ba687fd41548e250efcf420c9523947fa3c8790727a854ef644089d97a95550dd05f209ccca9dc8b625fd3c8d5bd62b721bb76f366113348b40117b72441ed6316f92ac6f2fd840a2415a35bb6084b7f5997657013df64eddbdc70ae621aecaee8d6158c8bf4a08cd1d3033df30d5655094417cbe0992cbee0d3834d70c6d1ec2bad207b5a2d191e44903e41980df9fc3d5387795f8ea097b528f945795431661b0c74d8ecb5ba4de7fbd27f172753845724bb32a0e51bc943325753ddbc76fc469e038fd996fb7091c31803bcf44914eee167a00946f23d1592821343f066ea81c59ecf38a48ce337dc1489cbcf62fec8e10bf9f8a154e583701d8b2d349f6dede9528daf68fdc001af50490a7da5e4134ca882f94cb8ca0c4d2d44d7765244f4885260e7a44bea4e4ee6417ece7834ccc8bb7fca6471262919d7d2b2ceec0c8223db7548fa32e58a9d5eba1d76613affa9e0122c8dbc81c8efe5ae027884a3f8551a3a120f5e67e272aac3e6c8640a25aee2d7ceac5149e4b406c2ceb462d1f68137c3c9f98361d32190561c48b0a675dec74081d020a549300cd3260ba0f79c16f9c457be5a8ab6b100b41545e0e5ef2feec4e1bcf94afd2a15fb4bce394e1c466166119b1c4a448faafa61071543efcec2f3de9819ca93de21092f14e12767482989b66c8064435957008b0ded75d98bfde6458b773f371a9258ce1b71afcabf2427a771deaeb5589478535d30adb657a9b299bbeda0a643b1e2671e4e0757e129cd89201bae3d27d36ad01e0fe303178707414bc8adb982cd340e74e31ec66e05c827c8abe4c243c5725654c719cc016e6e7db4c45b7fe6ef1721797c1ba37e7df55a0eddab500afc7bd296f7286b725c42e367fec2a76b4b24583cd5346a454aaf80ab38b4a9b77cdb7f306c838d6d749ed4fc423762ead8b4980aacc7a09fa4b93e05da45baed8bc2db728af98f01860da3bbab3667276062ce01f3c8bb05bc79b98248cb1d00680808a1234292341141ff3d5afc1ec8dd1bc133f341f10f4a1c20f8b65d5ad220ba1629111e7beec188185604368d3c9ed155bc7408814e63e99c00d95e3b0a99aa8021a0c8d385f1c50cc23a21e10cab7134ca5a764cbae68248952b7f64bf466dd7b0333de9be8132147b5d3041c03b175b360890a8a2e7bfacce2fff8acd0c99037073ac00d167fd697bae2f54e0cff2a7f5c2b5021f8e1dd77a75c60bcf30f995c75e90684c01774212d8eaf97d4fd4f224dbecb1bdd343e62e514d118eaccaf3d070a2fd26c51413f2d161cd80892ea96c3deea668e3bd9806e1ccd5c0a5f62bf945ab7080b1d047fa87a234a09b8e3a6016834fa93c991d02238da812ea462b320c18769edc8a260acc2c8023c236bd6a731ac4caf7db3b839f2d1eae1efa6372d9691fb950cced419d008e66a647c5b720ad3575b2184772e1bae78ef0b31635a26438701245a6964ad7895006e578b970bc0e34eb0260290d7fb18c060d794a0d49450eadc51b615fbf5d86c97682b9d89a851348389e95e0a18a99c0c62448abe11ca6882d4b230e66191c26dab5741f3d6c25f90f6f472a6387e8582250d7a3790dabd127d8c41b1c0abcb29717e3ceb57191198a975dc11612cde81ff20107de0438c5158faedb0acfdfc2bb3ed6ef361002eeecddbfd694a492f3e083718509ef14d660715d6261b3c4d8c66fa815e82aee760bdf25a6d7ad311c6d25318981f5abeb1f001bc5cbf9f43742820067775ec14d5d355ebe75e4fcff426629ed00883969ccd77ebb0217f663b70410397a08c4738ed2c88657ed1a2881ba4fb0b0afbc8256d4f2a948e147f1bfb50afe5e69f4e9cbc8ef6168d8f1590e879bfc03f12075eb40bb262c478ea7c8416d8bff59902bcdbdd1bfb9917e41e09f93d85488479c608fa2cb6dde286a158399512d30808f242d25814971b3c7a7fc553df2c25dea05d2aa680b6f335a8decaa4eef33f42e19bd044380db512a89484a21b874f3c32d05f58d02d64de44356fa92b080ecf872e3beae65d8db78c62cb183ef08780058688bee2b7473859ad5452788287d32aedbe6246d30e3be6d8dce387d342b65b81eb710a055fd050e92001e3a3fc8efd14d5168d659a6be2a13f3a2649d23d6614f07bf8cf56d2ba9afa31794696bf602d3b94a90c2bdec8fb14abcaafaba95ba88596bbbf889a862e2d0d3ff59eb55a058f780515bcb8e1cf1c22275fc467e10d6941be18c9b271779fab6c1cde8fbb16ee0e844da66880b3a1ad6abb8a95c180f5bd24e1f37c50697c0410dc93b60e3d3705cb2fbcedc804b26fd899d42c635ba78fc0a9a77983f616c124b27ae604b2fdf2919987641d4d7faf494fee0b9497b1cc3a107a5c7ad4221e5a6cbbc2b61c2e697179c9714098c02dcae5708194395f225c882feb62d3a4ceeef140187709f92ee7514cd96d57278bf3433f9a50a72f7022e2ae27ad6515c84a90f4eb6fd15dfce226d3e1df70f9ade227305dd7f80295c38b51c62fc01032ab3678c10b320259c641ee84eaf1a35ad07a840cc6860361afd559b835c37c632e69870c674e02f3119ec14f7cd946b52c8ab450a56bb1dc27945920e111c5939803749a4b46e9509ffde8bde8e4067fb3efa37b5d32f2ae2003a3e1e8d1b7495de702b372fe195b3bf6848b980564870f0c94c9134d57cb93efaed8e928a4a84677d870e8e241be1d4fcf3861fdb5d6f036c9d9aa106550b71a83f3e824163f94d242aae771b3bd6551f488567411a756dee671dba048d53754006ad97a2dd300c2fe62d4768173b977b49a6b283783fb14dff06591a089e5da96e5a8280c068f2286113620eb678de7f556cc3217214f89cd27cbcf3a3e2a470528274f2a24a5f0e6b77c13e2f8f34142ee28eae84f2322b68e4793e0e5010d8a38323f541bdd684daeea84e84a44be11308102b6f446712fe29e42cf0cf8716f12289cdb2a692919b1758a824f31c2003bd2205bfbdd6a40daaf3bb2e21ff6d09348d3258fb65aaf039898d7abba5bd27cdcfd7d81e8f9905e6c0884c50ab4910ab9b502948cadc1fecea2b55ce140989098054adc080aefc97e52240fd6d70230aff1a911e3dec674e0981ef99e6d8304a799d170fb2f78143bdd3ed89f68ce54f1c2882273fa94e4af02b61404f441d87f9bda067cd4ff51ce7bf6522d50e1488071f95c36660ad4b3539442237d4ea42327d745567d3e2ab8e7fd2577f834702aee40619e0b4c8343fa28aba7e3c845b0e76ce51a26827ae0db364f71133ca5c1ddb9d740733b3d8830b2c8464de6e79f59cb475f1cf2ae561a051b2ce2e5ce95a6daf1853b5c9fb3ec3fa123dc534e83223acd419976f1b9882045da9398300be252f722562b5c0ca19579240e7bbb84fc3df60a4a5775899bfa7781040408405960abfb7005f7ac6f0ba653dbf40dd3f07a2f2f310e775a807eecf13a7189b25d98d2ef7c952b0057b2c40dbf94eb24b6716d01975a23b7d3363efd424f6bd66ed32f67fde2eb0245386adf13e4665a5649973f18c3a82206de59f3b3cd2af12434207e4555e834003a13a1fc9953364658f993003fa4f528a45b5ca76136c849677c27991815ac6ca552777c809af43c95a740748d18238cdf6fffb85e91cfeeba6db8088956f1725effb735bd97ddf961a4fc1073a0cf38caa8a2ed339f1f9b605a69e53e28cf417183031239b1f0bcc82a7b5263285efe2a59f829047a8dad56e0ce3840f3159c7113871d71b11ae4318619d8d462efed96a686be46bdfad9080b5e57e9320a71d63f359244951af74db72d2b62943a6b7c0417b2ee2caabf2ad34848f27401dcdfb0af017643ba0e49664d30474466b349d2baee42ddce4a4627b7b09af2bc8f7ee08adfbf2c5953f0cc19084c4ef3970a431f602e9e2b6cfac6450107825ae753bfaa9c5455204c004c2b6e0ec44a681000eaa43d3954ef584cd85975203d041242c8dfbc18c0a9ca529b9fbd43f2db3534bb45d1726d8c6f1991d5593c2ae9a0d4543180ce2da9e52742b75a47d2e7c48c40a87e4e09c745a81af6f52704637aee15e18166b6e6e0c6d7a80fe710bc76e98b479264a0411e6625c7d5b7127799c24db07ec561fa92610740a331de5bdbf236b3c3339ed4cb720955166ca3a2b5ecf46da5d617c620672850f64f4c0f9d03122b50ea3bf5f8d2f289bb16806a1cafe07b01714ed57c6c7ccf3aabfc2212aa54373182260d057bcc789c43f60c2c6de136a9d7c9fc4040620f26248ea706fff49ee80f85c9ffec4c2effe8bdff3d5e1f137df29ea58c1a0743785212c9c454fa1c1606b2b92eefb8c0890f2bfd2c1db07f8f51ffc64c69d4227d3cf363431f85184b9287a3c932407e8acf893b3604589fac3bd8a713ae226", @generic="2f9439498215c71f251ca637c98af8e580cfb6678ea0ba48462b0d8a84aabea5fb8bed795872859a02e53085fefcdbc43b61eee661bd2869135e85edab2d00943e1d7897a9c423ea42c685a6980a794b43d4b9327e44ba12cf079b7827cf5d5956e5b68ca37fcb57188109a5c5689c590bd9290255bdd41970410643555a20a04aac404c8e4f58f2ea5b63aa4cdb240487d35a9c7c5f84c6667931f54a0eb7c318ca2b32c27e494b0d207ae985b4130a664d63"]}, @nested={0x46, 0x2f, 0x0, 0x1, [@generic="9f35510fd3018a1b978d45309b78a3ee28a7356605fd0150c2f6c200004ffc265dfe6fc035d4dac35ee041a7f1529bc7253ddef4434a4e6787fe23a9ccd7e56937e5"]}]}, 0x23f0}, 0x1, 0x0, 0x0, 0x4040080}, 0x4890) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) getgid() [ 169.807361][ T9076] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:47:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010003b0e00000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0000000000001000140012800b000100697036746e6c008335af5066"], 0x40}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x3b, 0xfcac63255a9a7f96, 0x9) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) [ 170.000560][ T9119] IPVS: ftp: loaded support on port[0] = 21 [ 170.190484][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 04:47:52 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x4d2, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x3}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe6, 0x0) [ 170.246334][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.343226][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.374343][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.921087][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.986002][ T9119] device vxlan0 entered promiscuous mode [ 171.038260][ T9120] IPVS: ftp: loaded support on port[0] = 21 [ 171.786031][ T7] tipc: TX() has been purged, node left! [ 171.795156][ T7] tipc: TX() has been purged, node left! [ 171.802999][ T7] tipc: TX() has been purged, node left! [ 171.862361][ T7] tipc: TX() has been purged, node left! [ 171.923206][ T7] tipc: TX() has been purged, node left! 04:47:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="37aee8f6faea3511bec093194a30aa40c9a54731b8c4363f3ea18db02e1b3004afa2655cc96268e1a240bfd9283d32c38ecdcb1b", 0x34}, {&(0x7f0000000100)="2239c9cae561fdf5dd163ef3245fc0fa78411998b3c147dec313d6fa5e7c02b0d26935386694fa555bbf933034c694a2ab9dc6f26753866738d3ebefa33599b6f1dcf5fc77d37282a802d4f56eb1b67375cb33ee917e", 0x56}, {&(0x7f00000001c0)="add4a06dc2baaea72ceb988f1917f72e3a31f0247c32d82e04f8f2e29e91744b0a7c4beca1b3081760fe773d24f8e37746070cb58915639b1934f4c56e46573120ab110b5c13f2754b1d5eb1929563c2b7575bb5ae0e40b97e080fc058cbaa7679a1ac67c66c5c90de8b9ecc6ef13bc5e4a87f1c1d052f", 0x77}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x6009000000000000) getsockopt$ax25_int(r2, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000080)=0x4) close(r1) 04:47:56 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x16, 0x2, 0xfff) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x4, 0x0, 0x2}, 0x10) ioctl$FIBMAP(r1, 0x1, &(0x7f00000002c0)=0x1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000280)={0x2, 'veth0_vlan\x00', {0x9}, 0x3cc}) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24, 0x8}}, 0x80, 0x0}}], 0x2, 0x0) ioctl$SIOCPNGETOBJECT(r3, 0x89e0, &(0x7f0000000240)=0x7ff) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000400)=""/251, 0xfb}, {&(0x7f0000000500)=""/250, 0xfa}, {&(0x7f00000007c0)=""/59, 0x3b}], 0x3, &(0x7f0000000600)=""/197, 0xc5}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000180)={r4}) r6 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000740)={0x0, 0x10001, 0x3}, &(0x7f0000000780)=0x10) sendmmsg(r4, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)=@pppoe={0x18, 0x0, {0x3, @multicast, 'geneve1\x00'}}, 0x80, 0x0}}], 0x2, 0x0) connect$nfc_llcp(r6, &(0x7f0000000100)={0x27, 0x1, 0x1, 0x3, 0x4, 0x20, "0d8249449548a12161f22d8b738f9fb6b9919cc7eb8fe4686b5df85b9ce4aaf2fc86285581cf584ea354d00e03a953980618b08fa44dd8c199c482044df421", 0x10}, 0x60) 04:47:57 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x4}}}]}, 0x3c}}, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)={{0xcc, 0x8, 0x58, 0x340, 0x381, 0x80, 0x309, 0x3f}, "684f3e3efd888bf206e658a0f85754a03b154105d94e7c59bd1a1c130029b94039dfad2fb32262a88f85ed46402bbfba78580504ab58b179fad284043f98b498bd91dc82014d78d3c600eabdfc160eb47cbe5d632c61227ee57679770a713e9f6d885ae97e077525bc8cf534b7ddb5423f8d10689a02decc46d4d27eb9f1a265f0505dce31481bf4986a6305af037f8d901d69bdba386c62eab28db5a85ea508864f73bd2b5452ecdd962607", [[], [], [], [], []]}, 0x5cc) 04:47:57 executing program 4: r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x7}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2, 0x1, 0x0, 0x1}}, 0xe8) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000e00)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002000000ac"], 0x18) setsockopt$inet_mreqn(r0, 0x0, 0x100000000000025, &(0x7f0000000440)={@multicast2, @local}, 0xc) 04:47:57 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x23f0, 0x3c, 0x8, 0x70bd2a, 0x25dfdbfc, {0x1}, [@nested={0x2ac, 0x64, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @pid=r0}, @generic="ec6fb6f048bf132cbd75c50da1ce678b16bc9408f3e9c8455e32d0c59a532dfc3721aaf2aa9b16e40466e89e6fd4563fd9b0afd1056dffe781a4caf38a4af03be65b16efbeed6555e07d0a604def6b2f5871c707889fb60b8f40942c566c2bb439b48fe632335b62521fba8db33ae1da0d12e5924164ffadc28180a64baa2b8a391120e9ce8332c008f5be192759e3346313288407035b9d1c700d33e98bc90c5e09006ab1d576bdcb1532c0a7", @typed={0x14, 0x78, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x7d, 0x0, 0x0, @ipv6=@mcast2}, @typed={0xc6, 0x38, 0x0, 0x0, @binary="ec1c2aeff5ab9bc6e5dac14e72cd28010e5907ae2a2392916963b543e85099ff6a8aa30da773c9c6f13626f921113d1f2d9538b429892ecb47820ccb7492e7f3176de1796995f96feb306e599bc0262d9515ed52a767a2434b237abb7c668b319102fe01964f8ce58f3ba8cae65ce4f4986b85c3a67aa199b9c14e5ae39f495a2a5eb891c65a1b48013cec666122cf316a636b17e5d44426101fc04240f4245bdc7eeed95c26c8dc464ffbb63787905640024f2a438c618f516c1f478ce2213e5423"}, @generic="1606917c51727b14c98905e5ff094be66fca58d1d8d2bafa8a482179333981c71fe72d565fe3829e9394ac73e8bdf9a13fd159b653efa17a3873fafa75f5de03f1c20e6b0c6e530e2fc85ac49ef35fd7372efd9974b80a333b28818995262b4dfaccc475fb7d78cfd125e561e39b6d13a8073ee90db945cce9a4dc219e3590dafddb1fc9efeabb9fac5fbf44b9e367d71811ff3cd68ef5ea5ab5a3d153898db22c371d4415ab8745185bda537e4b2ab9e28f5a4f83abfaaf1d91ea6dc968ae4e8529783fa3a3b27617a023c63395c2a65ebed0f4594bea14909d3431b13901405e31cab3eddb0b096043678c49307d", @typed={0x14, 0x93, 0x0, 0x0, @ipv6=@loopback}]}, @generic="0e067a47761fd12d14f4cccbe54888ce9804f12987a30a1d313b6c350020235a3f030b2e1d4da902ae2d6e1a5cd532cdbf98c4e22f60141453bf92e984db50f24285d62161822d311422cfd8126604ea927210caf02a9fd58dad2abd6b35402f674a4a2fc7ff505a41316768d97e01afd1b45b580d586b4eccdcf137f0c526e2606af4d6794e34d29a08e28c832c47acdb4aa3aca8bbd64eb4f055a94db1d95f7109ff9003446264cef4e51af615e27a0694aeabf1d0bc6981c748121cef08887c61c0cb2845554513f6f734f6d192f5ecd18b96cae3f8198d5b2c05add7cd186cb57f78802a7defdb99547c4d64d9ec4719790c9c0b5e45fddbd6150c435ec1e429a1991fe35da873bd5627365ec50766ae4fd471d5d863f46f1014cd2134ef2fbbd42393eb0f2102068092451fe1669a3427670a9b3b835ed5f54b61acd1e80447281b2332b03f57df21223af1fb987f24a615768437d50e74d8beef19f7803c05ee2493793085d597f8112c368e12073a0545b90f21ca8e7bb32e88c1ab570fb536faeba104df3689d69276c11edd35500b6e0fec482e478fe7e67d463ab2b8499db1dc71169aeda84f2ce17cae72d42a1433cb2cc5ecf9f41f3315c3d95876830c7e7c17b61d4c1c345bba232df19635a78db4cd2177e44987d131d2f05ce4d68d2a4229a33dd370c3031dbed609effbaa6ad335cd4f42642606a985821d02f2a1be24f8e5b2c348068ff79c9dae458f2450b7b1cecb72db6ca5ad5fd604ab0961c5ec12f99e968931b7738cf228497ba5e9b3301f40d33c08c1f177ea9453753f30c84d03c7cc8f52fd0259aa9ea4a9cea0f308fff3f4e55bbe98e774099efa6c1d3448b24cc9da40be0678e790852d2f76c79e9762c141cdf9315091cd15136822926212cff8fc960f04ba8e6befd397655a00b6589fc8735a6ec7b461620c726cf13d1e5c511668f94c8231cd24c8148edc7c47a3471766bb6222ab15bd1e59dc321c86061e605df9b11672ab0cd2dc1ad7e86582fa3e532521e1058e5c8a0c21dbe89fbb80c7d50bfd787ecba6878335e61878582d281a11b5f61d4813ee8baeae36999b43287f1c1c8cff88b2b19e938fe16267790b5a237e00241910065b4d950df7e2c2691062764054c2d536a02ba9e42b86fac38edf8f40a45fddc9f325133120fad927b85525ca6331aecd81dc3c279200a3a2a45f41611a8fc84643ee8451b072b14a0c911c5defdab8edcfddf20daba6bcdaef0de03b67174b5a50c261d6c0996841d4121913b62b013d7a72becde571a5ee48f7bbd5a293b218eebb970b3f0d37c0ebad4b695f33860821e8f129122cd029d5571344026dd313eca8080c011c3b402893f2f134b24fc36313eb53e71582d18fe5bb5d6e816043ccc7bcdcc89b0cd0d1cae640be3bdf67f91c0d2417e64b68ad5351382b3615443960a7fcb265017d55fb8d6369f172272156da74239390635b95dff5e4760bbf301baa45feaf84ae671546acf2bb4fb7930f1ab785db2b493b4235679c39996261e2554c22fff7bdc7ac9d654a935a8833c75be180635f002e62dba7e766244f8ba6d522d95649aa329cfbde0f5f1fec96fb9f521c224e1df0baf1f2619ae419b3bbf0ecab4230ee92629ad263b192f14304f3811793d67003c58903a70aa1416e42c0c195b200f8eb4a506673473c81b8e2c397ff33f2937e8395bf73fd2df2265631a475dc0710e8dcd0fad5889a0289b4469f6ec35e08395ae384bf49c5b8e6f676fe23df1118e0939f4ac85d55f8a927c8723467647f2b3f919ba1204751d4ea592c8068fdb361fad582054fff29d315dceea0f97d6739b71d39792710cc035473617b41f3ed5d0dac52a1f148e7d9070310c7f9edd7d388f64c3b4e465cd86ff7b97206a3015439bab33343c11d9847fbcea5502711ce7ca3bbae5e82e537e2fef57cc48bdf1d4aeeda2f9918c2e31a87378a5361a4cdb19c20f81f667a392c089634de8c5e8067fa46b537d184455ca01c72a506bfcd22a33e31417b86175735147cf1bb8fc6298fed3456d7231daa6953c23955a5572dab6bf63b8d806f3c337309b07eff249be1849a2cebfdcf1963dd4a32b7f61ec817381121e2ebc5ea8a0639d605331b526d9aafc187402aa4c45b6fc8cd5a0f9c6842dd7a7544b34032087f6b284f2d77a9f0ce2729683ac6146b585192d20b753fd8efd962ebd1db22de0bdb3aa6fb2ca952ecc9ea74dfefa85a76fd1383d3186a1ad4023414af95e3ccabd3cabea2bac9b4881ab64078e6930ea0be6e5055a671e6ea4888fa7d3f44ad34a6cd7c0d5ce00dad2186a33c125721880c28e775fd40d3513b5948dd8d6086e60e02c9b9145d8fdc47d7f98954e38e726028c8a0b6ce967f4f9932679ba9c21b6a63cd6b6a88edd28bcaae4d7238b677dbf1e9f1a1d0775458a663caf2cd43a90be48741530bbbcb1528247b0e8f509658ce6fb9168d431f7f459fb8bf050f1f7a204a59b89a7be9a41226efb86ba29a0f4708f9a55515a55102f583eb665a0e70c0b9a46003dc8a1afc2e2676d8313c72fea7d3c2371deefc194fbe6b6a89485f627aaedb6f14618adbeb9f187a91a16ae47301dfb0689cb181d16a56eecb398815f3167363327829fbdd3b780717341052f5fe33556ad4cf6b8b2ad21214779d71d04b2b287735e9725b105a2ee4a7b10e07342b955a34bded8af8af74d2637cfa85f4214fe2c49923324fe19d277fd4e6d552b06199dd22a3af68810d569415627c015b6901d9406c327a62694f12427c324a0e26364c547101914c68b57b03bb0e34e07c00116c1b897e512957970bafb238de7403db3190625083a5c42f23b64fd6b35c437af0048afc58db78b4253aed6cfcf7ccbc642a2a7e25cde793559e0d318992896c7d741fa0ed3e2893631518e650ccf918189a6b6b5aeae1e2bb712342b447d149daf9e9682248b5bbff568142c61381354475a0d62a1eb368a79dffc66f79602923f2ac752fb15e9407e225907eb640adee6dae1e6e8087835c5f7f6ca7242492fe38a5513e3e6a650a707d458a03185098d54437333839c0e1580933dd7d81241f32cd7aa009ead076ffce9e5e3c23e4f9add3c733ad49fb499288901b64e9b394621c96fc90ae140366b7227341544a623be971be109df5e0be898e2a1bd357d2f8ad14e86df0c2a3ea300c75b3cd3c6ab4f817ded8106599d569c7966d504bb22b1ab63412172457eb5705a54adb9214236b25a61bf7e218f3a558f4eaca588613789db6db44c3853f8faf0201e7e213e03e126d30e83378ea566cf20c970e403c157afaab8139b02a2a39d0f866518f79b2a96d316830dc49af39dd41fd25486b645942ccb9c3afaf97a41b841fb12c187698db89c0ce55c08785935b405ba91c9425f6a0bcf981043342a3c51221ab4df711bcc886cac8841f58b59e65a22b84755cb2c4daa3a45559e9e3461a33a5f09d23686b4273e56a15410191b44ddfd7e94bcf4ae15a4e3f90bbe68639b81e1f8deea810084c86d3b1e24bea773ebdbd4b439fa3b74f04e7f3b424855091455cf15c88bbd06cbc29df525b577867609d04dab50558e54c6f2719282f4b73ee62949bc38aa72c86d4edb36ea7231cff469ece8ff52e395e4b3db47f2a361ec988a5c4056b57477f94736f2b021253fd9c5e903cc5c7f3e32b2334e0f5e7c99fa28d991fbedaa5f0ff01de951473575519750a85e5e68e6ac9b5ac31a9fd625073e98a2629600e61bde12037a5f19c264cb963d7041d23e36da7d8518c7359f51487ef10d882776aa447e889750eed1a95b6195a7184852049c7e56c36d4a918cc5b9f7b662c8141a41bc862436f3d265266ccd5c6ff4a560afa94f7423ea3bb8ef557cb56cd3ebaceab38e00a1838f1c471cc2c137612bc03193be6633b101301f57e7cd96399a80e1bd032a6a96fc312d69166738b476b8bc73e8e7f3c721533653788ff01a277d4ff437e11e2dfd60bf9902c729eaa923df660f5c3f28557e9b85cde2deb0ff8e8da68d052820817779d8e32f52dfa32b0a0e923f93f7d08f6b43d694d2b60c84df2b9a230409af4b959c1ac36e231914804a72871a7877bc13f1c267cc8ff811022aa96fb018475c910a0656bede54df16ce3211e88047c645e2694bf38950d39d999e4e99bb4960b8e829b921232a295de17e0f0c79d66cd3e244bc2a260cfd083a426695c1d147d259d6c3429db31d948374d81f59c569cea42559594540add908eef389de7bf50b4ecf7884f4f43ed104ffdf32bc485e8d62d95b3de3f97db5bceda4b066795895ea743577d08ef01f7fe174cd94f6060363efda9e671b181ccc9cf43cc1b49fe7f34826a594fe10890e5c9b8ca01fe63faa1a134be257e4320424b6d01af43a32c5800957ceff6eb9dfeed20e3c76508d4254a0362ea241102fc409c609f1a0dd06943c13277d0f0671ae8eda42ffd88541d4c536269057efc734e4c8da6ce198fce1154b5264abec4a1d4cc1acb0d1b8e150bbdb26c7ac16198e6347286a1dbf59aec5cb21cc0306eba8ecbb23a5723a5ae4075370332a373742b53471db7dcd7c40931500c2a847cb54e24cbad90fe074cc7cc438a9812f980dc3e1e1be80fffc24673b877c2b1b5e21b639193fc473fc4c47a00baf48ad59ac50ce046593c02309f1938ff885ec0c805aef51f33f128d90d6fd9bfad0aca5a42878a00a1c62d0c05fcf33c7cac15c40b0de687aa3e564b8b4fa8131e8d4070f0e1f0bcc66f3026b517467b28987f06a5877e15b13822a931632f24fe12bcd0a49690a7da3b9a3a98d54ace75eb50917b7c0e75d27f4459684463aa4ccf33e62bcbcc7a3bf619818feafef5a7fcdff13641d2e58f87756dfbfc63ae0f242794f457d53242aaaac00b39b8e51d1bab849125b27b7c55195ee817bd7b69b2ea10eacf66a7f3b0e551e423a7c84b374b9be5d3dbc2def7f8fe40d230d21c4c2e12b050a94176a09e6db7b5b2917b05f61b9f65439b80463694817e08c6b19c4b9accb617289e8bc9da56d7ada24fd2a2b68a8ca9471397604df2417a08cf0c03e73161cb0a9c598e950e364a0a98f64217dc3823e19c8c0882a19951fd1a0c3a05fda9f5a6d85e2b4ed3da9eec012edd3e631ba576a59c9dc5d99357dd5684665952acee139e0fe06500af6c1e26f611d31c7ee6f108107a97e37f46fb5042b41fd54898577452b4c6c3c29444b2dcb5fc9ef6cdcbde3598bab54d0f7d39c73e2a5e38f01588bce0750378ec5a99ac2214b4d81e3a3a16cff4c36e24dcf71f17eb20f2c5cd884dbf5c201a8f8d6cd1cdd3fe8fff632f48cd31a4478cac4748aa9ae77379aadb6ec50a53f6f97a90e1ee03dfcb1cb65d04b6aa2a6a222d53dc9ddc5012ebe57676e122f0349bc9f72056da657ff16e4b44390a508ddae046c246ce0ad1a96123eb5c6a7f434ea48d4cc1510cfd0f5b08a4a6566251c0e31d92761e56fa530bf19c4e4ff55a1114afd0ef56688f3cf2ee1822f0c8d4959276d7c9a24a4462ffb2a7cc3cdf1292df3c174c6b0847cb2204c6e9edd4d96e1929f050535aa77e87b7351c7f94d6bcc2a86607c02dbcd04296ca9d3f166cd6b2d2f34da5de8eb2933b0e5c4dd2fcc83815b8cee4b1dd4da14eaa6612d9339dea6d567cc7ab457ff976d45168c90e3d9ac747b193682f68984dcda628a083c4db5c9fb7f99eca093a5a48ca5c1ca33d34a92639e1dbb958093251dcc106b6a4089fb875e25bb5fd5e6107c5c2e3e24f3f48fe612f02028d673a", @typed={0xc, 0x60, 0x0, 0x0, @u64=0x9}, @nested={0x10da, 0x92, 0x0, 0x1, [@typed={0x8, 0x50, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x1f, 0x0, 0x0, @ipv4=@empty}, @generic="ad15839a95d3522830d0cefe21c3b0fa6abb0c", @generic="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", @generic="2f9439498215c71f251ca637c98af8e580cfb6678ea0ba48462b0d8a84aabea5fb8bed795872859a02e53085fefcdbc43b61eee661bd2869135e85edab2d00943e1d7897a9c423ea42c685a6980a794b43d4b9327e44ba12cf079b7827cf5d5956e5b68ca37fcb57188109a5c5689c590bd9290255bdd41970410643555a20a04aac404c8e4f58f2ea5b63aa4cdb240487d35a9c7c5f84c6667931f54a0eb7c318ca2b32c27e494b0d207ae985b4130a664d63"]}, @nested={0x46, 0x2f, 0x0, 0x1, [@generic="9f35510fd3018a1b978d45309b78a3ee28a7356605fd0150c2f6c200004ffc265dfe6fc035d4dac35ee041a7f1529bc7253ddef4434a4e6787fe23a9ccd7e56937e5"]}]}, 0x23f0}, 0x1, 0x0, 0x0, 0x4040080}, 0x4890) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010001fff0000268f1c872d2b01000000", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e000000040002"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) getgid() 04:47:57 executing program 5: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000000000000900010073797a30000000003c000000090affff00000000000000000000000008000540000000120900020024797a300000000008000a40000000000900010073797a30"], 0x84}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000200)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000240)={"68778b1e163b8d2113ecfd3083bb5812", 0x0, r3, {0x906}, {0x6, 0xaf3}, 0x401, [0x0, 0x7, 0x101, 0x8, 0x100, 0x6, 0x0, 0xad7100, 0x1, 0x8, 0x1, 0x4, 0x9, 0xfffffffffffffffa, 0x400, 0x12200000000]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000001c0)={{r0}, r3, 0x10, @inherit={0x68, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000004000000000000000800000000000000400b0000000000003000000000000000faffffffffffffff81000000000000000900000000000000060000000000000003000000000000000800000000000000"]}, @devid}) mmap(&(0x7f000082a000/0x4000)=nil, 0x4000, 0x2, 0x40010, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) 04:47:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e292) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='io.stat\x00', 0xb00000000065808, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000b0000000000010000001400020077673200000300000000000000000000240003"], 0x4c}, 0x1, 0x1faa}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r1, 0x0, 0x10000000f) 04:47:57 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) socket$inet(0x2, 0x1, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x3f00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000001200)={0x8c, 0x0, 0x800, 0x70bd26, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040841}, 0x4000005) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x13c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000815}, 0x20000000) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYRESDEC]) [ 175.217939][ T9204] IPVS: ftp: loaded support on port[0] = 21 [ 175.289842][ T9211] IPVS: ftp: loaded support on port[0] = 21 [ 175.299634][ T28] audit: type=1804 audit(1600490877.948:19): pid=9212 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/23/cgroup.controllers" dev="sda1" ino=15899 res=1 errno=0 04:47:58 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x14}]}}}]}, 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001800dd8d0000000000000000020000000000fe02000000000c00090008000000", @ANYRES32=r1], 0x28}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0xff63) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001800dd8d0000000000000000020000000000fe02000000000c000900080000", @ANYRES32], 0x28}}, 0x0) r6 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='macvlan1\x00', 0x10) [ 175.489953][ T28] audit: type=1804 audit(1600490878.088:20): pid=9227 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/23/memory.events" dev="sda1" ino=15895 res=1 errno=0 04:47:58 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x492492492492619, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x420000015001}) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000002000000000000e6c29e1d0d274b974c620000000f0063218cf8003806ff20010000000000000000bec800000002fe8000"/60, @ANYRES32=r2, @ANYRES32=0x41424344, @ANYBLOB="c904000290400000ce80b424c7ee008c00ffc9030614020303dc0147096675"], 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f00000001c0)={0x6, 'wg0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'ip6_vti0\x00', {0x3}, 0x7}) bind$isdn(r3, &(0x7f0000000200)={0x22, 0x5, 0x80, 0xfd, 0x57}, 0x6) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x140e, 0x15, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) accept$alg(r0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [""]}, 0x14}}, 0x4004040) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) [ 175.707920][ T28] audit: type=1800 audit(1600490878.088:21): pid=9227 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15895 res=0 errno=0 04:47:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) socket$inet(0x2, 0x1, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140), 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x3f00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) ioctl(0xffffffffffffffff, 0x1000008912, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000001200)={0x8c, 0x0, 0x800, 0x70bd26, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvtap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040841}, 0x4000005) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001500)={&(0x7f00000013c0)={0x13c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000815}, 0x20000000) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYRESDEC]) [ 175.878321][ T28] audit: type=1804 audit(1600490878.178:22): pid=9236 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/23/cgroup.controllers" dev="sda1" ino=15899 res=1 errno=0 [ 176.081498][ T28] audit: type=1804 audit(1600490878.708:23): pid=9215 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir565491170/syzkaller.TF5i4o/15/cgroup.controllers" dev="sda1" ino=15902 res=1 errno=0 04:47:58 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x6009000000000000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private0}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x1) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x800) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000a80)) write$binfmt_elf32(r4, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x80, 0x4, 0x81, 0x304a, 0x2, 0x3, 0x81, 0x8, 0x38, 0xbb, 0x20, 0x6, 0x20, 0x1, 0x8000, 0x8, 0x2}, [{0x3, 0x9, 0x3, 0x800, 0x4, 0x9, 0x9, 0x1}, {0x1, 0x83, 0x400, 0x7fffffff, 0x80, 0x1f, 0x7, 0x7fff}], "7f393ecbc7b007c7c37b4b4e5d1e97b1b00a5d79f3aa6a263054b0ba167e35b0e7878261d71e4f8167a3529907c8576e2ec45a038e1735c94f21f81df1800000005df56c631ceea45a9d1cd0eda62e1f839fbb40b15fee03e278b937a6b00707b117f6e84f0c3f305c73db0930752276bcea6621ec03c3e8a35d6426390a71e11c106b2ec552c47520d18cb618748d16b1c2e417dcd3b610", [[], [], [], [], [], [], []]}, 0x810) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {0x0, 0x883e, 0xc, 0x0, @opaque='\x00\x00\x00\x00'}}}}}, 0x0) 04:47:58 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003240), 0x492492492492619, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x420000015001}) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000002000000000000e6c29e1d0d274b974c620000000f0063218cf8003806ff20010000000000000000bec800000002fe8000"/60, @ANYRES32=r2, @ANYRES32=0x41424344, @ANYBLOB="c904000290400000ce80b424c7ee008c00ffc9030614020303dc0147096675"], 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f00000001c0)={0x6, 'wg0\x00'}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000180)={0x2, 'ip6_vti0\x00', {0x3}, 0x7}) bind$isdn(r3, &(0x7f0000000200)={0x22, 0x5, 0x80, 0xfd, 0x57}, 0x6) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x140e, 0x15, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000100), 0x4) accept$alg(r0, 0x0, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [""]}, 0x14}}, 0x4004040) ioctl$sock_inet_tcp_SIOCATMARK(r6, 0x8905, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) [ 176.283545][ T28] audit: type=1804 audit(1600490878.708:24): pid=9222 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir565491170/syzkaller.TF5i4o/15/cgroup.controllers" dev="sda1" ino=15902 res=1 errno=0 04:47:59 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') connect$vsock_stream(r1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$tipc2(0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 176.452092][ T28] audit: type=1804 audit(1600490878.978:25): pid=9282 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/24/cgroup.controllers" dev="sda1" ino=15901 res=1 errno=0 [ 176.664318][ T28] audit: type=1804 audit(1600490878.988:26): pid=9279 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir565491170/syzkaller.TF5i4o/15/cgroup.controllers" dev="sda1" ino=15902 res=1 errno=0 [ 176.726499][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.785485][ T9204] device vxlan0 entered promiscuous mode [ 176.881747][ T28] audit: type=1804 audit(1600490879.128:27): pid=9301 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/24/memory.events" dev="sda1" ino=15899 res=1 errno=0 [ 177.123682][ T28] audit: type=1800 audit(1600490879.128:28): pid=9301 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15899 res=0 errno=0 04:47:59 executing program 3: r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='t', @ANYBLOB], 0x74}}, 0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6}, @FOU_ATTR_TYPE={0x5}]}, 0x48}}, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006, 0x0, 0x0, 0xe0}]}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x158, 0x4000000, 0x158, 0x0, 0x0, 0x158, 0x240, 0x240, 0x240, 0x240, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x130, 0x158, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00'}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00'}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) r6 = accept4(r5, &(0x7f00000002c0)=@alg, &(0x7f0000000040)=0x80, 0x180800) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000009c0)=[@in6={0xa, 0x4e24, 0x5244, @private1, 0x3}, @in6={0xa, 0x4e24, 0x6, @loopback, 0xfffffff9}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x10000, @ipv4={[], [], @loopback}, 0x1}, @in6={0xa, 0x4e20, 0x0, @remote, 0x6}, @in6={0xa, 0x4e21, 0x6, @local, 0x5}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, @in6={0xa, 0x4e24, 0xe241, @mcast2, 0x1}, @in6={0xa, 0x4e21, 0x40, @empty, 0x8}], 0xf4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x6009000000000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000007c0)={'ip6gre0\x00', &(0x7f0000000740)={'syztnl0\x00', r1, 0x29, 0x4, 0x3f, 0x0, 0x8, @mcast1, @private0={0xfc, 0x0, [], 0x1}, 0x1, 0x80, 0x2458, 0xfffffff8}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@getqdisc={0x38, 0x26, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x1, 0x1}, {0x1, 0xb}, {0x3, 0xffff}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) sendto$inet6(r4, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1f4) 04:47:59 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x6009000000000000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private0}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x1) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14, 0x800) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000a80)) write$binfmt_elf32(r4, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x80, 0x4, 0x81, 0x304a, 0x2, 0x3, 0x81, 0x8, 0x38, 0xbb, 0x20, 0x6, 0x20, 0x1, 0x8000, 0x8, 0x2}, [{0x3, 0x9, 0x3, 0x800, 0x4, 0x9, 0x9, 0x1}, {0x1, 0x83, 0x400, 0x7fffffff, 0x80, 0x1f, 0x7, 0x7fff}], "7f393ecbc7b007c7c37b4b4e5d1e97b1b00a5d79f3aa6a263054b0ba167e35b0e7878261d71e4f8167a3529907c8576e2ec45a038e1735c94f21f81df1800000005df56c631ceea45a9d1cd0eda62e1f839fbb40b15fee03e278b937a6b00707b117f6e84f0c3f305c73db0930752276bcea6621ec03c3e8a35d6426390a71e11c106b2ec552c47520d18cb618748d16b1c2e417dcd3b610", [[], [], [], [], [], [], []]}, 0x810) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}, {0x0, 0x883e, 0xc, 0x0, @opaque='\x00\x00\x00\x00'}}}}}, 0x0) 04:47:59 executing program 2: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000b5a6fd89b53ab01c3d88a8c88b10000500"/33, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=@newtfilter={0x884, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xe}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x858, 0x2, [@TCA_FW_POLICE={0x854, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x20000000000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}]}]}}]}, 0x884}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:47:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f0000000200), 0x10efe10675dec16, 0x0) getsockopt$inet_int(r1, 0x0, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r5, r4, 0x0, 0x100000001) r6 = socket$xdp(0x2c, 0x3, 0x0) gettid() getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000380)) getsockname$unix(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x1004000, 0x1000, 0x2}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r1, 0x8, 0x2, 0xf7}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x0, 0x5, 0x20, @dev={0xfe, 0x80, [], 0x2c}, @private1, 0xa1, 0x8798, 0x0, 0x1}}) write$binfmt_aout(0xffffffffffffffff, &(0x7f000001b540)=ANY=[], 0x0) 04:48:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x1, @empty, 0xc772}}, 0x0, 0x0, 0x3e, 0x0, "2eeb1438a6b6b042d5bc76c550d7f3cb1542661ebbc899a8d1c1ce433735495df22c7cf8cf34b375792eda2dc9e94db402697ff7d74d2ac13dd92b9d56fe04fb03efd7807ead4daf6377259de0bf02e2"}, 0xd8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea4000038000505d25a80648c69940d0424fc60100006000a000048051282c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000780)={0x1}) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f00000001c0)=@phonet={0x23, 0x40, 0x7f, 0x6}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)="e17f89b1b1ba6eaf8ef605cf8ce464011af425e8496bf080bf0318235b42e668fdf3a56ac5fec7b3e49f6479fd0c8c76818c8c42fb73cd1bb76e012365290d7050d1496d2b1f6e3db4b0bd23ba72f8a9d82e03613baf4b74fa43160e2f055f118dea8dd9ece029872ed0c4839bba15e1628fc06a8c168f1d5e288f13a0767670979f04e986e3b3321d5f6adab47bf664660bbb987b34e9a6aeede3ffd60dd0cd270afca4853fbb3144dff2a809957090ef25187a32a4d0a1d7ed6be37bac6b133981b5692e63f29e1fb674df32e2504cd93d42a9c900ce2cdfba64", 0xdb}, {&(0x7f0000000340)="c8e7be41ee80e13e1ed272f6900b0e077f7201bbc41e1ea24e69a5d66f19d718ba2d1855a27c9dc01654403b0d450414804dad414d865aec9cd91290d4daabaa721b288d66b977e684e9046d7d9f426e64d434", 0x53}, {&(0x7f00000003c0)="a00a1906bc1a5d532f2ad7c716765dbff33746dc033ea2ce4ba76e2974a78f6d04fa18f468a4b5d59dfc3a85f67604c8286fd484b9b01531e66747f1cef8abb8058a582b19f2b856c5797e22b023f434ed502add9d8b4be12036f61de1712cc7db8f6eb82f22285f1e376f9effceaf7390bc1e9c4f13143fe6a55a44ed389c32d83cd811a9e36fe747284ce5c3c94dec0d0bfb85202f144bb8", 0x99}], 0x3, &(0x7f00000004c0)=[{0x60, 0x29, 0x8a68, "3076e37eacda02442b7b8459e850b6effa7e970116abf6a78ff5c53e0cd3712dc3480ba98c86ed61da83b302c99c96cfe8eee18ecfd156cb8a00a1f43e76c5fcecce776e7f26b1f8439bdd0d93c3b2"}, {0x100, 0x103, 0x0, "e7120cdc54765249ba87c04d9021ad75702c58427f9218ed912790fd6a3e5e6a380f139f318350a9fe59402772a9a7ea6e7442b901fe54791c5e4d3319f09388d1d47174cdd045e4736370b6cc3e3dca7e6cb56251f0ffae3d66f0a7ba6ce24b9fafb10b2da747ee2bdf58e749cc2368ec45e2d216e148cc022fea23db3018df6622444545b6e72e7a12881201c407e16e670ba25d0aaf758333d9039c2859adb042b4c12f2af09a3802a2a3e8753ea8a2bf1a527bb396829e16270fecebd9686758be5d86bd218994a59bebb2d9d3d4b8e71669e2bdb26d2324bf2abd03b1711ee6444801e2227097f7fe"}, {0x28, 0x84, 0x0, "48c60bba1848268024225542ae4a177a13e8615759"}, {0xd8, 0x10f, 0x1f, "780e0dd9a5639cf9c783e48a0371fdacab6e8f0dc55113be7f9a787d1428207e3192f684b42dc44cbc37bf491fed2c1c26e2e0d6d534b802f400057116dfd8a2048bd60c047bd0d2fa5828d29be03a1806760cfc5927ed966f20ee6dfa597a571bef7d98e352003e35c81ec2e2df0c9cd8bed0cb585af760eac9f59808ab8d3685e0da3217136b2dddf999c42c84207fbad369b7202a2d7ac6e5f99162ebb84c0c62c700de3211a1a460d102dd52c119b2643212a6e42d893bed7ca73e64b8cbaa5a25c67dd7"}], 0x260}, 0x400c811) 04:48:00 executing program 2: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001180)={{{@in=@private, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'wg0\x00', r0}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000012c0)={0x0, 0xda, "46fa7a6f14e6a32ffc560f6c654aa248a373cdcc08c821920c81193e3d6fb4094161dd39a8c24b70b4dcaf58b75630cfe72b09f129eb315d1fd3804c2862a6fd03b46edee7e4d0322fa49f3451da8a8b7d9e0dec748dafbe583676c7ed3fb05bca706a9d3ccdb3c59073031f81dd02008d9be902e54181437502fdda8c80d60ae2cfb9fc265a6846b807742273685ec1ce1053569b781ecc82638e564f3105910d65c5be667396e13fab01ec90e2da2d3309e930ff9ac12fdde3c1cde4ff5c92f8ad590a5d2e557bf9ffc3155e699729a63b0b0cf0660f1e5aed"}, &(0x7f0000000000)=0xe2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080), 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_proto_private(r1, 0x89e6, &(0x7f0000000100)="a8207a71de7b7b07d82a56a363c0b1cb481ae7d11b537aa5779c106cd8b57ff909c247f7c5d8b09972131e99c746b0d9f2ef779a720c20e0c5ad1492fff8eaa8d304377f867e3136ff8ffa67396b2c5339460c9d3d0127e8eee2e25f5939db5b3ac518cdeba87e285ed1a77ebe4bc53fafbfed3b11da5eb2739ec86500340a3a3c0c372487cc743ba6ee654bc012a858b7d93e18d68e269cc7d24dd84ac279c0aa226fba2fa46f33935ecd256b65a9a88e71285be659a081316d04683bbaf5a6e4c4181709ff2d4279cbcacc17d22dcbcebcd9d4359d06356e726ae81efa1af220426796e5d178d5cc1930cc043a152208787ff3276474ab6c8295b40df4a61f3a307e7e1f862a54ee20f6aaed7f008815090e60d29ba4e51b37af434f90c1450966927f7ae07765e73e21b705e32fcb3cde7c7a750a92c36979ae97c196a40a30d7a5033df2d878f847b6b957679543b4ac2e39d444524ba640963ebd948ccd9ee687592c8c5a19d24a458cab355edfe30e1fb44a4b2d458fd7039cc8cc0289587aea1ffd9023a9c09418b1ebb54714a18a6fff47190ca5a8df0036c5ab454d9a570e9028aa90b1b75f5f9309e53a1caed2c9a42135a2718455548f256bb4a5ceeb6f981c1c2e7a45904d450f2d0d916d0901f60b4d497caa00caee75e3aa123406a1301ba97a7fc2a648f5dbbd78a01c8bd14aa5ae3944b4f6f88ce4ba09b4898957e09e89997de9367b28d6e4a2350659e8faf33a85b98c962fe12bc0bb0900a4b5b1a44b7ea416213052868d81707356ca4e2f308774ee7d79d2d3426bd793c8774034d830e94b9302f97f3bd6489b359ebaa8f7dd133e1d363adf1b413d642f1e0cb4504b2b75fde4f9fe6e5fd5e785b7a3ada632d2b5e3b61e412b2f67a12a05e58dfae59f58ad71cae379a6f578cf155c2c1e70e957d42618aad55e1a19d809f67e79500b35a3463aa2f1ff7f94a7f54b9150927f9399beb9cce44175e2c79fb54da05e00422cd413dbebab6464bc2681727acea1180df64e7919674a9da42d89c38089f06a104b8a001e3b62eb731f77bf424542510f7f92b7557e22c38b4601ef15e2cda2821c63f28d629726b1e43d393e0bcbebed9fb7e3cb8a86fa1e71f1f9207dfe85566246b4598c8ac5da78eb4eaa81ed1780094f4da180a1b3dbecb020a705548d1e497d0de965745012bc9fa5a9839c6ce0470fee255b11781ab4be41d24ccc3335c723b9e0a45646738ff1a7583667632541338ac0b3693b7a043183240c1a10d69abc0170f66c461da57bef20be4e19074432608784d6cc1dd3534e059669310e8d7e803f1912c74712de3ad1c4f74bcce204ce2ebe9e651b0121d8eb6965c9d92669ee2ac32584017ce9007be6edd745c99de0dd7404df4fdc241196238e3631bfe103c12e09d50da475a3cf2532cf6b461136466cd6b9fa0348224ff3fca2b1a28878f2712cf48d30683691866623f71242cfa73331829549015a67b8505b3932aee4f15df890fc157c3e439d27ff4f44d82a5e6bc190660b9394c92a43945f76e50cc5419c2c8425915e5aebb94b85ab2e37169deefda7f25a283e276cd3e7091ef3905b626a6014a7f9c68cd8626316f3e474e9a5fbfc24343c26fd4d889377c7c00b3027bf05c834610b99fb9789a96efe6d488934bd5ed9531f0909e21b00c36e37cf1f0c6bd87b4a2c18d48667486d9ac17d7e41e553c62f86fc3af42fc6e1722e03a6231cbeafc80abd1e4880f767941e9265508ae609e4e51a3f9a490fac1786d2ecd3f4ac0842827f7b635c4969b761dc47e2de0322eef3db5bd516a6e80335c5007eae469598b5cf8796606a6e6cb96854f394427d099491c892f70aed2d7a0b98eea917bc7b2809d15e5287acc84c3bfa9dbd85d8fcc73408384ada45f665c05734b0decad5da0c7c5313f22e3a8ae70527738515a640278d3b67e99dbc9aadc3a0e2e52c99340a125a729eede97e175580dc520ec876c5122fc4aaca4c70ffae7f73e873debe1415ce92e2c46940ace302acb5e9dc675f261ae107b65864e1989cf15c0382d7bc75ea2a2aeee8ca48483ac02a194e97f84c0a4e8b024d3e18c3f1d1d6fa1f66ed605f356350a126983f20284e42d4d424cef5e33cf8d88b8ad883f505d629a3343447de7c70339b5c9f0aa648fb0dd8ecb08af1dacaa9d174a38ef4bd3df4b3ea2627b71a7417c2d32a1c80cf1e80011a9860bdca599930dfec556f7e43f9f081690e5c95eacaa17febe7cacd28529fb73f031d338a6df7551007423228a822f904737f5c108c633c7a5238f8001ac9d6ae2df59b6a20acb7dc9258dbbba62ca74a844da9b845efcc3059eae340935285664b8c2183de4677a75196589052659ec462749dd529b8328f158a077d3d0901a8754477ef8aabddd967283d1443c720aaacc50f3eccf553df408f4c8542a9448f5df4481e7f442cb3a94e6723e0db6f5baf20426f7736e313c0160513211db376f4d7fd245cd14d5845e95db04d6dcfbb579e523b662015be96e1ce59f533ac164f47a2eba803ba680be222932825ad7218d35e748b264fb689e2bbedc4f1edde56ed988da31b68f747db2f97283e20631957245f772b962f763c796328142f1cb21d08ac719d8d53e094d20fabd11a1a9c4c87ebec493e37ef0b65211b837dcf1a19685f465163ba2898cd90b6e9506d0f986408248800ab70d4d5e45038f53a428f3ad6335088bad970a65e689d23e3b8d239eacf1a411464d76e5558876dd60f3cba943bea10673ff455dc57498554bb6772b27a71b0044cec3de4546b555c129563cbd979b9f3c126bbe5b94cbc9e01fce1329d969aad8ffb5d3099a5ed9e1f5aeb8ee076e56287a989e4d135338108d69c666409b45004fbd23917ad94ea9c5e54aa9f47b9b1b0f2e55130b1a997417a368bb5f04bf42935fb702a2171b7c1a3d5abb3a4ea418760dcdb53b1514d13b93e3ab33b5a8820961e036c4d0c16475650fdea010319247b12a3065d4877fa2f8e3b47ce3d97f9288fe0e89782a40b761630bc60edcd2cad4959d406aaa487358e7f211a7c803af7b74e92d082b02ad9f1fd390375561bef17cfd5d2a10396d7790578b23c7084a699f8fd20dc2601ec5da6e1252b485797ff1777518be1556b4d46f77764629f38f56fa52ef8b34a57d1935e314d425c28a8e411fbb6d9a9bb4ea8bba6aa12dda5664e373eb2072b237fbf79143dec43e88caf95386a5012bd2f15471206faed8e26c7eed3dda8c580c6261142e21b78420f1600385741b0ac9d21a0f227fa40fc7827fb7441068b8999b6cfe1a3f4439159db4b997c21d803134de196b8aa578d73fef80628452510dd9a0b0193a0727e466c713c0964b59a91b61dffc09afaf3d408d7b37497be9c1a363e023748791cbbb706950a9b776aeba2560c1676afe79a0d4ac2e4009220c2329a8a12c45b6a8fdf8db3349c074f386929cf32eb92945240e305ee54219e84eba305051c0457b644ca183b787388d74af0205d1a54bcb81b9af521a6fbbdcb93985b328cfb6dc8ab59f69c074caf60f51c5fddbe17320df91c0635f869e49281f9446183828404cfec5b226bda640d4fdaba29a2c3b23de436030e7a8dcc516aff577a45ee426b7d117428990f38324098c1462f08b526638256946ad61378779b59e6e921fbe13274b71343036cbb364c698f33efa1c1f38139389c7cc392f4c3c7f93f53e17245342b88311cc27742a4bf51989b45b75e190526a6c30a4431fed7b0708ce04405ba804ab512f527cf278af7607e758ce5d8784dcb3f4d159e47414d9ed68cc2edbf9c0ff8bad05a766df513325a7a6dfb2d9aca7cf3584c226a2de85667a538599d2b7ce983afd9cbb9e09dff4594389edb4dbc47ef8ab994aadeee89c89d158d21449aa8dc893dedad14db6d84b2bb5b7cdca6c6e03ead99f891b5f8ae2f02e2cbbe09cbd0e3ea0a3436b4e52a1b7d01f0c9822357380bee740503803ac3c9b535c2e464e6da1348e263ba197ee3b211ab092872f0e0cb9172e604a357b19a375f39303e2525bc341d456bc48e874a197127be3e66822c344b8a56d31b7b50572bec894b59abd8da07c9c1e6ce7aa8601811d44db1e2e8888487dbc9daaa5cb8967146d652612be52425d1f16c05073f79fc87d63eababf7b1cb7e3af1d751d87f559a25cf539af735ffeca42c4a8bbbf4e7e13509986b6577019585b1a1e6de3836fe7f16850e6a222bc7e34a3cae0f0c11c33a869ee618cdf029171b014c3e34e5e934b1db2d10a0c0549d7162aa604f06452cc89ebcd878bfd837d71492490fb079ae1619a7d6692a7c488d006fe5e7b9132b6a54ce8d103953b93de060471a2b42f5ac2e82fc0fd220573df2de64ab5769e022b26daba414f0b687478f0c074711742250d6e7f14fa51bd664aab73e95329922b8a7b6787fc9ee4892573674939299a373d207ef742d19855960875a3a671618aa16d832810fb02939f7b9d541aae386e4238149cbb6e47f010ede0e2bdb1deacbd8c63e0b0ff2ec4e387bf78d3f8a42fae1f86140fe6edcb3cbd212b8f116e962475ebe2e3f3f869f90bfe77c18fef780db0f25c89930cb6800ffe45eddc28a5bb60d41d29c54c38f41698f57c7d530ae6d0da2c550a88ca8e725b681b12881c77a7451ed5f2b2a335069fc5efe00fc221429cd8bf233b14510bfe3d92d6c06623c12035281e4eec5590d1163a397db4420876eae39984d757f3c95d773318065c22cdafd5be8f4537f00a845ff456a5f9f1bbf7f81756943a20be8ae0ef2b3cfe9ce78a648534ad94675754861027c0dc3dbec2c64f30ac59447fff6b7e9d2ae62460cf2f567dd4f0e964a3f9e4df12bf3f83ced9b8e94db4ba3c3fdb49bc4517696674e6f0e9519396d183e690142a6fff60ca9cf9d7a3767a9a2b6cba50d6f2f2c82b7131aea2d0af6bf9b034ac2c23c4e2880150dba2effa9d0bbcacae0e0096097009273db272196712a343023b540db3313c40959cbcfbb65172d0680dba51fd921004280dd81667a50a7817c1cbeb0743d928b76b5ee4551de94089867888b2a6311a3d5982448f6e15943f115cd5e3ecb35cc209cd4661fd49e2935c15cee7798c5559a99b4b4217e0b250dad7562ed2f9acc4b9fb3ce06ee71c7e3263817db98b75889fc8cb1bc615c240b5ba652f9f5efd554babe2e2f8973cb574a9ad41540e5a2d46a0daf7341ec631754aa71182d4a3259bbb4b9edb31fc0ff5fd7980c2ca322d523e752ebd471d6eb9a3867e50c6946733fd077034ad88cb9e95d7875d5981830d26edb3d344f6e19df761ea1afd199734ab5653026b21cf5d89a6fcf38303e47b2e8d4ea7b9e50ae0461532b4de41175e9062fc24c471efbfc7c7ee64206b0579147c648a4a1700062d3075fd790dcf54bb0931f6b6790e4c37a7cdfb37d192a0674d5c26adc8b887377ad54c494dc0cd59708a6d3a3e39ea7220f31da1ff95b620564bde6aaced8a3cfffb3c84052fd81bf6b36d3a78dec8821c6504d5ac5009b08af2d04ee6eeaf84f05a3cecc699e99bc6f8be9cd6387486daaa47ad9dd9aaec7cf91d2204e0f77d209824ed8331854a6a286e7736cc9da81856e74163e86d9bb5dffecf989209f7b97178ea10d65772fd000fac725a6d568b10e2e60b41fb9b446bf644c54997dc54aa5dac9a2dec51a6dd2f41e211c7b2683119716aee982e0ffa5cf73a348e9d0d65c6ac6c51a9255acd29e1662a2259ac9a19b5c792bae571e6e2b4d8ac5fbf28928b6df81") ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) 04:48:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a7900df00000000e9000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f00000000c0)=0x20, 0x4) [ 177.815573][ T9340] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 177.934639][ T9340] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.005895][ T9342] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 04:48:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) 04:48:00 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[], 0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fff}) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7fff}) connect$caif(r0, &(0x7f0000000000)=@rfm={0x25, 0x6, "fc03d8f0c4a3c46a4d95fa4d1fd93efd"}, 0x18) [ 178.047978][ T9342] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:00 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e20, 0x1, @empty, 0xc772}}, 0x0, 0x0, 0x3e, 0x0, "2eeb1438a6b6b042d5bc76c550d7f3cb1542661ebbc899a8d1c1ce433735495df22c7cf8cf34b375792eda2dc9e94db402697ff7d74d2ac13dd92b9d56fe04fb03efd7807ead4daf6377259de0bf02e2"}, 0xd8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea4000038000505d25a80648c69940d0424fc60100006000a000048051282c137153e370948018000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000780)={0x1}) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f00000001c0)=@phonet={0x23, 0x40, 0x7f, 0x6}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)="e17f89b1b1ba6eaf8ef605cf8ce464011af425e8496bf080bf0318235b42e668fdf3a56ac5fec7b3e49f6479fd0c8c76818c8c42fb73cd1bb76e012365290d7050d1496d2b1f6e3db4b0bd23ba72f8a9d82e03613baf4b74fa43160e2f055f118dea8dd9ece029872ed0c4839bba15e1628fc06a8c168f1d5e288f13a0767670979f04e986e3b3321d5f6adab47bf664660bbb987b34e9a6aeede3ffd60dd0cd270afca4853fbb3144dff2a809957090ef25187a32a4d0a1d7ed6be37bac6b133981b5692e63f29e1fb674df32e2504cd93d42a9c900ce2cdfba64", 0xdb}, {&(0x7f0000000340)="c8e7be41ee80e13e1ed272f6900b0e077f7201bbc41e1ea24e69a5d66f19d718ba2d1855a27c9dc01654403b0d450414804dad414d865aec9cd91290d4daabaa721b288d66b977e684e9046d7d9f426e64d434", 0x53}, {&(0x7f00000003c0)="a00a1906bc1a5d532f2ad7c716765dbff33746dc033ea2ce4ba76e2974a78f6d04fa18f468a4b5d59dfc3a85f67604c8286fd484b9b01531e66747f1cef8abb8058a582b19f2b856c5797e22b023f434ed502add9d8b4be12036f61de1712cc7db8f6eb82f22285f1e376f9effceaf7390bc1e9c4f13143fe6a55a44ed389c32d83cd811a9e36fe747284ce5c3c94dec0d0bfb85202f144bb8", 0x99}], 0x3, &(0x7f00000004c0)=[{0x60, 0x29, 0x8a68, "3076e37eacda02442b7b8459e850b6effa7e970116abf6a78ff5c53e0cd3712dc3480ba98c86ed61da83b302c99c96cfe8eee18ecfd156cb8a00a1f43e76c5fcecce776e7f26b1f8439bdd0d93c3b2"}, {0x100, 0x103, 0x0, "e7120cdc54765249ba87c04d9021ad75702c58427f9218ed912790fd6a3e5e6a380f139f318350a9fe59402772a9a7ea6e7442b901fe54791c5e4d3319f09388d1d47174cdd045e4736370b6cc3e3dca7e6cb56251f0ffae3d66f0a7ba6ce24b9fafb10b2da747ee2bdf58e749cc2368ec45e2d216e148cc022fea23db3018df6622444545b6e72e7a12881201c407e16e670ba25d0aaf758333d9039c2859adb042b4c12f2af09a3802a2a3e8753ea8a2bf1a527bb396829e16270fecebd9686758be5d86bd218994a59bebb2d9d3d4b8e71669e2bdb26d2324bf2abd03b1711ee6444801e2227097f7fe"}, {0x28, 0x84, 0x0, "48c60bba1848268024225542ae4a177a13e8615759"}, {0xd8, 0x10f, 0x1f, "780e0dd9a5639cf9c783e48a0371fdacab6e8f0dc55113be7f9a787d1428207e3192f684b42dc44cbc37bf491fed2c1c26e2e0d6d534b802f400057116dfd8a2048bd60c047bd0d2fa5828d29be03a1806760cfc5927ed966f20ee6dfa597a571bef7d98e352003e35c81ec2e2df0c9cd8bed0cb585af760eac9f59808ab8d3685e0da3217136b2dddf999c42c84207fbad369b7202a2d7ac6e5f99162ebb84c0c62c700de3211a1a460d102dd52c119b2643212a6e42d893bed7ca73e64b8cbaa5a25c67dd7"}], 0x260}, 0x400c811) 04:48:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x161, 0x11, 0x10}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f00000000c0)=[{}, {}, {}], 0x0, [{}]}, 0x88) r3 = accept4$inet(r1, 0x0, &(0x7f0000001580), 0x800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000015c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x45, 0x9, 0x6, 0x9, 0x1, 0x5, 0x1}, 0x9c) 04:48:01 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$rose(r2, 0x104, 0x6, &(0x7f0000000340)=0x7fffffff, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01030000000000f9b77ea2bbc87e9643a13733943ebee017bba21c4a590810b300000005000000f45000000000000080019e7c48669334643be6d8a164bcef687081bf33c8ba2201e3", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000400)={0x9}) sendmmsg(r4, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)=[{0x18, 0x1, 0x1, 'O'}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001440)={'batadv_slave_0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x5, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3400000097f4ec359ce743cb70d86706cf71fdb61c527c3d97da3970f1846aa467a427107821df59abf29fee2a884366d52660966eb4120ad4aa721b45c2e0a1d3e3ebe2b6dd5d8e3c9b2be47ccb360d5e837f82", @ANYRESOCT, @ANYBLOB="00012dbd7000fbdbdf251a000000050092000300000008009a000000000008009a000000e3ff07009a000100d20bd1cc7e91988b00006fb9cf8b45206b3523f9c38de87b000000000006000000"], 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x20004080) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c00038008000100ffffffff08000200070000000800010000040000080003003d00000008000200e50000000800020029040000080002000002000004000380240005800c000280080003000300000014000280080002009d01000008000200060000000000000000000000000000000000e413349768af442c6accff7c373624582ff13e623e9f4b91e90e6fb157943e515d07af5254370e9241557453"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x5a426}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]}}}, @IFLA_MASTER={0x8}]}, 0x58}}, 0x0) 04:48:01 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"/2113], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0x100, 0x3}, 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x3f00, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac141442e6", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x6009000000000000) clock_gettime(0x0, &(0x7f0000005140)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000004f40)=[{{&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/189, 0xbd}, {&(0x7f00000004c0)=""/191, 0xbf}], 0x3, &(0x7f0000000580)=""/18, 0x12}, 0x3}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/99, 0x63}], 0x1}, 0x8}, {{&(0x7f0000000680)=@nl, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/18, 0x12}, 0x103}, {{&(0x7f0000000780)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000800)=""/169, 0xa9}], 0x2}, 0xffffffe5}, {{&(0x7f0000000900)=@pppol2tpv3in6, 0x80, &(0x7f0000002640)=[{&(0x7f0000000980)=""/86, 0x56}, {&(0x7f0000000a00)=""/96, 0x60}, {&(0x7f0000000a80)=""/39, 0x27}, {&(0x7f0000000ac0)=""/121, 0x79}, {&(0x7f0000000b40)=""/201, 0xc9}, {&(0x7f0000000c40)=""/221, 0xdd}, {&(0x7f0000000d40)=""/125, 0x7d}], 0x7, &(0x7f00000026c0)=""/170, 0xaa}, 0x800}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002780)=""/92, 0x5c}, {&(0x7f0000002800)=""/44, 0x2c}, {&(0x7f0000002840)}], 0x3}}, {{&(0x7f00000028c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002940)=""/217, 0xd9}, {&(0x7f0000002a40)=""/250, 0xfa}, {&(0x7f0000002b40)=""/121, 0x79}, {&(0x7f0000002bc0)=""/54, 0x36}, {&(0x7f0000002c00)=""/221, 0xdd}], 0x5, &(0x7f0000002d80)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000003d80)=""/4096, 0x1000}, {&(0x7f0000004d80)=""/236, 0xec}], 0x2, &(0x7f0000004ec0)=""/121, 0x79}, 0xfffffc00}], 0x8, 0x100, &(0x7f0000005180)={r2, r3+60000000}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f0b000000fdffa6fffff7", @ANYRES32=r6, @ANYBLOB="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"/1055], 0x8d0}}, 0x0) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f0b000000fdffa6fffff7", @ANYRES32=r8, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000005280)={&(0x7f00000051c0)=@RTM_NEWMDB={0xb8, 0x54, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@private0={0xfc, 0x0, [], 0x9}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x1, 0x0, {@in6_addr=@remote, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x1, 0x1, {@ip4=@multicast2, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x10}, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x4, {@ip4=@broadcast, 0x86dd}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x30000010}, 0x8880) [ 178.413010][ T9369] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 04:48:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) [ 178.463989][ T9369] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x2000008, 0x28011, r0, 0x9133f000) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f0000003940)=[{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000100)="d3d8a6a85fb5314d0274b2b3aa055b7f97aac08d0d98eecfcefcf50694eb557e2a2c3774fba556a49b2c5cbac82aead5405747780a79fcfa6e35a7", 0x3b}, {&(0x7f0000000280)="8385fe2e6ed53dc5ed72a726968d45d258c6bc47489a1f32388e48b71a2b56bebe083bc80c6e6e1f04190bf054139731986d9cce77153556efd1bd4c24d8138cda37f4113600247f332cf9c391d50aec6405130360aa86866fdf10971ca60f1b5725beafe9df812ff2fff75d3c6dfa07988f8996c0ef0c4e26f8fdf95925fa7d0bbe3fb63d1fec4ee70be4c1e4f9591a718fa6b5582e0df4210f580f1428b6fc60be793279af721f6c759c52b0ee0a8fee8dfe7de457c98dcd8a4f7a8bb8345a360693c138b999186e3b06072292bc9dc5ecdb4737", 0xd5}, {&(0x7f0000000380)="d39bcf1b7c9e044fffd4c48f7c135cfd08cbb1c36c1872f85198b5c26ef73e38a0426a3c5c19c61d2e6f34b558eafd4d74d93928018e9e86cac61e913bc5c2a16d73b6adff95ca554a59e41f633c357fd017fbdd41d5370010f893fc4b8354993288694cf58b35fa944ab0b43a4b272cdad000ca06d5cf68d74b70a290326f05577ea283ebb4e6bea02ee943ab3ff7423f896253d081fa66ecdcf71223297bd1c5948ba7fb0ce9080df7", 0xaa}, {&(0x7f0000000440)="2ebc5152415ce3635b9813876ef2d839298f00e66d9f53299f3260258d82625d9abfa2d5eb955b8da2d32a25f1bd3bb9319a772f6382f79082dac6ee0ddfb685ee036b3599ed74bc5f3921119a0d430b0ab032e7d3bf41830f0d45c2ca90335324", 0x61}, {&(0x7f00000004c0)="58d026b168cefbfc716ccf593db5bf6c5bee4864f434ce915c29190da75f938868f8685e52acdccbbe9768c6545efd2d31924cf81b25b2c19d9fc5399b7bf4ef70e86860aa9a26d5e104a4ac71d5244f9f13f0e4d5c08c7f3a24cb714629aa3ecdb5c606bdb620cfd5a2f72d44c524274905a7386dab53edd679de77cef75c77fea4391131873e855c7532ddca712fd088417c7f273fb86f27a5048191497febd184e0bb923d8275aac6db5a9685ac220f8d81bb77e7734a7c7f28d95ea8c32de0313028348b96653891e20ce4202e82e682b1019cbe2b50e4a1a61a3a608c7726c0be64", 0xe4}, {&(0x7f00000005c0)="5578a3a0a5913d2a643292469ab7dd45e050514a62f758983ecb95a33bdd2a7fd56980e962611991623c68e54e68652eb975a4e67ecc5d223409ae9f366f83225b90da0e71d6352d1ed8e2832092ade2e25e80cf225f6dcd383338b4deb4b9eb9f9de5d7bc7c454f90bf8b650765f99afa9971", 0x73}], 0x6, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48c0}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="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", 0x1000}], 0x2, &(0x7f00000028c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x10001}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1060, 0x4000041}], 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, 0x0, &(0x7f0000000240)) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000140), 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008080) sendmsg$nl_route_sched(r3, &(0x7f0000003a80)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003a40)={&(0x7f00000039c0)=@newtclass={0x54, 0x28, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x6}, {0x5, 0xfffb}, {0xfff3, 0x1}}, [@tclass_kind_options=@c_netem={0xa, 0x1, 'netem\x00'}, @TCA_RATE={0x6, 0x5, {0x4, 0xfe}}, @TCA_RATE={0x6, 0x5, {0xe0, 0x9}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x2}}, @tclass_kind_options=@c_multiq={0xb, 0x1, 'multiq\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x8090) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs$namespace(0x0, 0x0) getsockname$unix(r0, 0x0, &(0x7f00000000c0)) socketpair(0x5, 0xc0001, 0x7ff, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f000001a000)=""/102385, 0x126933, 0x1000, 0x0, 0x3}, 0xffffffffffffffc7) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) 04:48:01 executing program 5: socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x15}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2c}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000c00) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000880)={&(0x7f0000001000)=""/102400, 0x120933, 0x1000}, 0x20) r5 = socket(0x0, 0x0, 0x7) sendmsg$NLBL_CALIPSO_C_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 04:48:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) 04:48:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) 04:48:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a7900df00000000e9000500010007"], 0x1}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000001) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f00000000c0)=0x20, 0x4) 04:48:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) 04:48:02 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3582bf9103650190610a92f67203cbc3b28e45ac87a1fd0670bc93a33da2de06ff4b1431", @ANYRES16=r0, @ANYBLOB="00042cbd7040fddbdf251b0000003400228070ff010000100000080003000600000008000200a300000008d74fc1c1c133fea18a89d1c00005000500000005009200d80000000400cc000500b100820000000800010001000000e8e5b1c4b76382afeca33662b860836c070f82992d42ab8f43235654f3e7dd876cae8f02d4084c000000"], 0x54}, 0x1, 0x0, 0x0, 0x808}, 0x20004008) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r1, 0x0) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x10000, 0x0, 0x0, 0x0, 0x3f, 0x0, 0xfffffffffffffffe}, {0x0, 0x10000000000}, 0x1, 0x0, 0x2, 0x0, 0x3}, {{@in6=@private0={0xfc, 0x0, [], 0x1}, 0x0, 0x2a}, 0x2, @in6=@local, 0x0, 0x4, 0x0, 0x5, 0x10000}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000300)={r1}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x83, &(0x7f0000000280)={r3}, &(0x7f00000002c0)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={r3, 0x10000}, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYRES64], 0x1}}, 0x2000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x1000000eb) 04:48:02 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0xa, 0x80000, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRESDEC=r0, @ANYBLOB="0000b20000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4b10dd5cb8b24f89f29ceef0a428124dcefb40b6b8ce6222864e92d22b053bda211a0aa613e4d66e2a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b9"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x7}}, @TCA_RSVP_DST={0x8, 0x2, @local}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xd}}]}}]}, 0x64}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x31081d897ab1c0f, 0x80) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x2, 0x80000000}, 0x10) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) 04:48:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)={0x3, 'syzkaller0\x00', {0x1f}, 0x400}) 04:48:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x22ea) [ 179.818294][ T9433] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 04:48:02 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032c05f6"], 0xd) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000003b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20800}, 0x0) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r7, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x84, 0x0, 0x8e6767b8eef245b5, 0x2070bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x24}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x84}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x54, r8, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5bc"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r9, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:48:02 executing program 3: sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000007050000000000000000000500000000040c00064000000000000000040c0006400000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x20000000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x2000000, &(0x7f0000001500)=[{&(0x7f0000000040)="d3622fe131479cee20fb607a9585dc0b411519fd3b65066522d73df58b9257b566c6fc626776defc3a2e249c9120cab00220bc31d41e44f96f67971b8ed8a3dc9eb4123a903d58da02dd1eca653150422bc91e9585fb38", 0x57}, {&(0x7f00000011c0)="7cc3be44ec866303c11f9ec49c2fe80d4ccef580f3bf717b5e129f1dc7766fdf864b7bc35924f34bb5fd1dd89172a4b0db90eea51bdfec78bb53e8d41773cba7f1305a8a40b7368445a71ef7870273f1544930baf73a8bfa6ece09d54376b821b65fdf1e0704f1f3c5a823fa67f635159af010053f5b909f8e944c43d6fb1c4fca639b470d3e6ad140d0838958ecf0fc98a780205474fdeb93a97d27b4f3314a9585129aaec893d7fe36d87fd746841ac5c60b31e1732a1a3ca0afcc4068cdde63b142700c563c1ab59dc0b7200723bf21c694583ed8fed1b2bc5c204df3812c223ce0de2f40b69e7f4e8ba1c3ebc31de2f4190e3f1ceb", 0xf7}, {&(0x7f00000012c0), 0x80fe}, {&(0x7f0000000280)="0c22fcc306e8a4d628dc3f33cd1758b784d34ef62ecd943b96c5573b05e34886b55503a08eeac42aafc204e9fec654b4b0853f4c32d8d6f8968a96b81710a9ed49ae96ea22eb07accdc99ed31fb48b921b4c9af7278829eb32247169da3593e5e73371e82e3558cd87b9c876b91e091e933496ae3a6b5a00a79f50110980c83af2fd44e0f08908f806be4146080def894a3ac87c3d214e32b0e031c8873b6ed3cdb9c160ee236576cb5a749ee356d4f5df961b35ec3667bcfa641e2c812a5eefbd78546783b6bd280dc4ec1cd015bee7d07f0993d6", 0xd5}, {&(0x7f0000001440)="7b18908bcd34b2f4eef2193c5f89bb79551b5d7000ccc31628374b03e7f0b8bbfe45", 0x22}], 0x5, 0x0, 0x0, 0xffffffe0}, 0x631b0000}], 0x400000000000132, 0x4000000) 04:48:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x22ea) 04:48:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x22ea) [ 180.104913][ T9434] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 180.242916][ T9434] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 180.345860][ T9434] bond1: (slave wireguard0): making interface the new active one 04:48:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="3857e2057d732e4d33a2112b9e26308b7e481c9ce609f8ceb60b73b35e1e"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) socket$inet(0x2, 0x1, 0x3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r4, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r4, 0x3, 0x7, 0xbf4, 0x200}) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x18, 0x140f, 0x400, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x4c000) syz_genetlink_get_family_id$batadv(0x0) accept(0xffffffffffffffff, &(0x7f00000051c0)=@x25, &(0x7f0000005240)=0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, 0x0, 0x44085) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x0) 04:48:03 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0xa, 0x80000, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRESDEC=r0, @ANYBLOB="0000b20000000000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000005b47b4b04fed4e2a21ad8beb06b167de4283ffaec56d159e56a166c9db835a8808a86292f4bea321847a42767a7b89b65e4841c9695825a4b10dd5cb8b24f89f29ceef0a428124dcefb40b6b8ce6222864e92d22b053bda211a0aa613e4d66e2a0490480cbaca2b1216ca5637c028cbe0af4fd21ed36a2ddd56830044f3ead6d80d6f3f39955a2bb6662c29c913e8356d5a58ddb4293241f2ed955ffa0b9"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x8}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x34, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{}, {}, 0x0, 0x0, 0x7}}, @TCA_RSVP_DST={0x8, 0x2, @local}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x0, 0xd}}]}}]}, 0x64}}, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x31081d897ab1c0f, 0x80) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, 0x2, 0x80000000}, 0x10) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) [ 180.401201][ T9434] bond1: (slave wireguard0): Enslaving as an active interface with an up link 04:48:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x22ea) [ 180.498875][ T9433] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 180.787720][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 180.787735][ T28] audit: type=1804 audit(1600490883.438:44): pid=9493 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir770150192/syzkaller.xs0cEa/22/cgroup.controllers" dev="sda1" ino=15921 res=1 errno=0 04:48:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000084ffcf8a63ed", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe, 0x1, 'wireguard\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)={0x3, 'syzkaller0\x00', {0x1f}, 0x400}) 04:48:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) [ 180.994626][ T28] audit: type=1804 audit(1600490883.508:45): pid=9484 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/29/memory.events" dev="sda1" ino=15907 res=1 errno=0 04:48:03 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r3, &(0x7f00000015c0)=ANY=[@ANYBLOB="8100635b36dd2f5e31032c05f6"], 0xd) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000003b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20800}, 0x0) pipe(&(0x7f0000008f40)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, r7, 0xb03, 0x0, 0x0, {0x13}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x29}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000091c0)={&(0x7f0000008f80)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x84, 0x0, 0x8e6767b8eef245b5, 0x2070bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38, 0x24}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9, 0x4}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffd}]}, 0x84}}, 0x4) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001780)={0x54, r8, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40c}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffe00}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="200027bd7000fedbdf250400000008010000000000000000020014000100fe880000000000000000000047da5663afc886200000000108000700d9000000080008002e00000005000d000300000075a68e4442482ca7f2e6910560f5c0028e39c4befbc53d514194f010340da6ac2b68b494d35a4396a4238bdb5a8638cc78276b9fd42ed57030abcf107000407a32c1539fd52ebef7c9b95ca1e3f34bd1a2332c4ab9968d98b3ec352d89e9093046e049d43a6c3b1f1a7464d4207f58cac387f51851e2a3a50967c9d2942ff7b62554b0588370426e4f0eb238967bba32168c730d4b4bb46a04fda5f5bc"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x20008801) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) writev(r9, &(0x7f0000000240)=[{&(0x7f0000000580)="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", 0x1000}], 0x1) socket$inet_sctp(0x2, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) [ 181.147000][ T28] audit: type=1804 audit(1600490883.508:46): pid=9476 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/29/memory.events" dev="sda1" ino=15907 res=1 errno=0 [ 181.163928][ T9515] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 181.274767][ T28] audit: type=1804 audit(1600490883.558:47): pid=9502 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir770150192/syzkaller.xs0cEa/22/memory.events" dev="sda1" ino=15920 res=1 errno=0 04:48:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) 04:48:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x22ea) [ 181.458088][ T9518] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 181.581434][ T9518] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 181.647648][ T28] audit: type=1800 audit(1600490883.558:48): pid=9502 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=15920 res=0 errno=0 04:48:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) [ 181.698023][ T9518] bond2: (slave wireguard1): making interface the new active one [ 181.717664][ T9518] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 181.777622][ T28] audit: type=1804 audit(1600490883.638:49): pid=9506 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/29/memory.events" dev="sda1" ino=15907 res=1 errno=0 04:48:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, r2, &(0x7f0000000040), 0x22ea) 04:48:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x200000, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)) bpf$ITER_CREATE(0x21, &(0x7f0000008980)={r1}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0x100000001) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 04:48:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtfilter={0x24, 0x64, 0xc49674d38e6fc8bb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {}, {0xe, 0xa}}}, 0x24}}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib_table_lookup\x00'}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080)={'syz1', "0d4bc2121563401a64a2cfb6636758c402a1bb283b02b2040f6a7c58a9eab705a91543b121de582467bc"}, 0x2e) [ 181.910899][ T28] audit: type=1804 audit(1600490883.918:50): pid=9520 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/30/memory.events" dev="sda1" ino=15933 res=1 errno=0 [ 182.038387][ T28] audit: type=1800 audit(1600490883.918:51): pid=9520 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=15933 res=0 errno=0 [ 182.132877][ T28] audit: type=1804 audit(1600490883.918:52): pid=9520 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir431229460/syzkaller.vQ8yDi/30/memory.events" dev="sda1" ino=15933 res=1 errno=0 [ 182.250588][ T28] audit: type=1804 audit(1600490884.108:53): pid=9499 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir770150192/syzkaller.xs0cEa/22/cgroup.controllers" dev="sda1" ino=15921 res=1 errno=0 04:48:04 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0xb871, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000080)) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x6009000000000000) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$inet(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @empty=0xfe000000}}) 04:48:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x200008d0) syz_genetlink_get_family_id$netlbl_cipso(0x0) write$cgroup_subtree(r4, &(0x7f0000001600)=ANY=[], 0x23fa00) sendfile(r3, r3, 0x0, 0xdd3d) sendfile(r1, r2, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:48:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) 04:48:04 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r0, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x1b, 0x7f, 0x4, 0x5, 0x5, 0x81}) 04:48:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x2, 0x2, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000100)=""/241) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x6009000000000000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x4000840) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x6c, r1, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private0}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x68, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff800000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x80) epoll_create(0x5) [ 182.383745][ T9587] tipc: Started in network mode [ 182.413464][ T9587] tipc: Own node identity fe80000000000000000000000000000e, cluster identity 4711 [ 182.446649][ T9587] tipc: Enabling of bearer rejected, failed to enable media [ 182.512769][ T9593] tipc: Enabling of bearer rejected, failed to enable media 04:48:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) 04:48:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) 04:48:05 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800040}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_getanyicast={0x14, 0x3e, 0x400, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x200008d0) syz_genetlink_get_family_id$netlbl_cipso(0x0) write$cgroup_subtree(r4, &(0x7f0000001600)=ANY=[], 0x23fa00) sendfile(r3, r3, 0x0, 0xdd3d) sendfile(r1, r2, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 04:48:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) 04:48:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) [ 182.938252][ T9595] IPVS: ftp: loaded support on port[0] = 21 04:48:05 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = accept$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, &(0x7f0000000280)=0x10) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x8, {0x0, 0x0, 0x0, r5, 0x3be23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8, 0x1, 'gre\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x44}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4000, &(0x7f0000000040)={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000400)=""/171, 0xab}, {&(0x7f00000004c0)=""/185, 0xb9}], 0x2, 0xfea549df, 0x1) 04:48:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) [ 183.102332][ T7] tipc: TX() has been purged, node left! [ 183.138299][ T7] tipc: TX() has been purged, node left! [ 183.165040][ T7] tipc: TX() has been purged, node left! 04:48:06 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1baed905b77d64f346c73f326b5150000000030800000000000000000000000000003c00048008000440000000080009400000000008000439a3b1c763ebaab8400000000008000440000000000800034000000000000000000000000000dc956769de80ea9bef7c877bca92bba6cad30df350078c136128736d80e19b8e6aea960e042c06eaa9a27005d30d4d716db81ffbbfe3fcd73bb64902fcb70e"], 0x50}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000280), 0xc, &(0x7f0000000a40)={0x0, 0x1a4}}, 0x0) r1 = accept4$unix(r0, 0x0, &(0x7f00000001c0), 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/95, 0x5f}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000000)=""/22, 0x16}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 04:48:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) 04:48:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = socket$inet(0xa, 0x801, 0x84) ioctl(r0, 0x0, &(0x7f00000000c0)="6ecc110dc0b81be0d0159b9232389eb72c279ee40e9455a1ad39bf80ae45addba828397fe0e02aec4788159cd82c23d7602334d24ae0996673bb24f3") connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) listen(r2, 0x0) r3 = accept4$unix(r2, 0x0, &(0x7f0000000040), 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="2fd0123312e1c3e3bf353d649bc02df43991668feb9d6cc197efb15e877cf1f4aa044cb817cec762c5cb28b6667c9ae29f4487a8e111eed7b1d3a4d1beb5362a03c9f1d6d82fd881c63687922e6fe02bab145c8b383301b55683cfee73fb4b62bcb1d7f7f97b15904f4af2bf58cdb18df9280867f75035f8e1be04c2e810a49b3c23025cf975bf0de7c3fffec278a4b55a190974c984d6d9f50a851e2fbb23a2c56f", 0xa2}, {&(0x7f0000000300)="7cdb54e5d742b31631ec922f324e50dbd4221b", 0x13}], 0x2, &(0x7f0000000380)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r3, r4, r2]}}], 0x28, 0x8000000}, 0x1004) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="070000006c6f000029000000faacf0d1d8537805c99fc57162921c8a35b2d43e1c6507e096b11b0000001d0e008014000000fc020000000000000000000000000000080000006314897733060d18e75e2e3517ed020fc18e45f64ba2fc7b1d289867f57bf424a757a8eafb04db990b00"/126, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc4}], 0x1}, 0x0) socket$pppoe(0x18, 0x1, 0x0) 04:48:08 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x1908, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x3}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0x1, 0x4000000) 04:48:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) 04:48:08 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x18}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x20) socket$can_bcm(0x1d, 0x2, 0x2) 04:48:08 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x3}]}, {0x0, [0x0, 0x0, 0x61, 0x2e]}}, &(0x7f0000000300)=""/221, 0x2e, 0xdd, 0x1}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x6009000000000000) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x3) 04:48:08 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="feedd1afed835df9a3c57c116cde267e45702f970ab40beb05617152", 0x1c}, {&(0x7f0000000180)="007242f1d0213686b5dd65068e40acec949890115732dde4042493ab059926e6a2f8117f877a2305cc8d54c133e4bde0177e286de4b79a96a33ab0765a51a9a323d4677e4128673170aa388e31b3f3bac0873e110cd9e9c670008352f3e37468ce963dbec19e28aa80a49552c5f43aec4f8bb8dcdd6d064ba8b8632399eab35145ef72bd5bb9f0306888bd678ceef9be16920fbe5fd0c96bdef8e711b41f87778ef7acf8a14acd319abdbe6570d6f5236bfbcd7119b2d48a7aebf0788e87d65316489de2e078d4c4200ca511b032eff0958e194741394573c327c4a2746805a92c24e34a802239377b6ed85aad0cd0236e0c", 0xf2}, {&(0x7f00000002c0)="9a1484ed4f7a19a2c1bb58b2dfea20404717c6a8df2052dccd69ecac7cd3c8438c2de61f12b358a36d1788eefbfac34d2ed8afbd06386525d35ccd7834878349c4c471c55a666432fbea6764c32456a968462dd3fe20ac4c55dec3d6dc6440cfec2c1ac2dfeb3eff713ada9d49afe0fae33736427ffa915273501465229d72058fbe27ea45fd0b4391686c578b270e0a551c1f300f5025210ceadca7c1e6d973882813f28d05faf361445184eec67ed7395db05d17c7babf1d4fce00b13ea5ae882ab0347e34fcee60faee528331fab72d561691a5ad11b5e16f9a5240620e5530b5b01ef5dbfee31a931452376470b3064788d18b84", 0xf6}], 0x3, 0x5, 0xea) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0xf, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x4, 0x3}}]}, 0x30}}, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) 04:48:08 executing program 4: getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000b80)={0x0, 0xc2, "3bb20afdcb362a07c4f208dd467cf2ac5db18322328cbd07c4643779cad2a1e5ce34069c6ddf7ec0d4d7b1955aeaab52268520a83df0acf9249c27f4001d8010b57dfb79a971aa26695468d52439e295bcd006c41d23556c8d68b0e0240b67584ef712f81fcc9d7c84950c22671050d784aa1cf396b8d5418042afb68489226c40ec2afc4f23b6dd4f079b2191a3dc7875aebd68387ada2d595aa001c92ec3a35c5eb684137b3bc15cf2c34d632bbc483cd20c8e68891003850ad0ccdb910094d3bb"}, &(0x7f0000000c80)=0xca) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x44, 0x31, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x4}, {0x4}, {0xc}, {0xc, 0x3}}}]}]}, 0x44}}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f0b000000fdffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000740)={0x0, 0x1, 0x3, 0x1}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)={0x214, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r5, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x19404, 0x6009000000000000) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000b40)={0x1, 0x5, 0x7}, 0xc) [ 186.340362][ T7] tipc: TX() has been purged, node left! 04:48:09 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x8000) recvmmsg(r0, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/155, 0x9b}], 0x2}}], 0x1, 0x100, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(r0, 0x2) [ 186.388317][ T9680] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 186.404988][ T9682] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:48:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) [ 186.494321][ T9684] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 04:48:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) 04:48:09 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000007980)=[{{&(0x7f00000001c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/11, 0xb}], 0x1, &(0x7f0000000440)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000001440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003740)=[{&(0x7f00000014c0)=""/73, 0x49}, {&(0x7f0000001540)=""/156, 0x9c}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/113, 0x71}, {&(0x7f0000002680)=""/190, 0xbe}, {&(0x7f0000002740)=""/4096, 0x1000}], 0x6, &(0x7f00000037c0)=""/34, 0x22}, 0xffff8001}, {{&(0x7f0000003800)=@qipcrtr, 0x80, &(0x7f0000005c00)=[{&(0x7f0000003880)=""/218, 0xda}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/53, 0x35}, {&(0x7f00000049c0)=""/115, 0x73}, {&(0x7f0000004a40)=""/39, 0x27}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)=""/206, 0xce}, {&(0x7f0000005b80)=""/91, 0x5b}], 0x8, &(0x7f0000005c80)=""/200, 0xc8}, 0xf0e}, {{&(0x7f0000005d80)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000007280)=[{&(0x7f0000005e00)=""/148, 0x94}, {&(0x7f0000005ec0)=""/4096, 0x1000}, {&(0x7f0000006ec0)=""/240, 0xf0}, {&(0x7f0000006fc0)=""/127, 0x7f}, {&(0x7f0000007040)=""/248, 0xf8}, {&(0x7f0000007140)=""/165, 0xa5}, {&(0x7f0000007200)=""/89, 0x59}], 0x7}, 0xfffff5b6}, {{&(0x7f0000007300)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000078c0)=[{&(0x7f0000007380)=""/173, 0xad}, {&(0x7f0000007440)=""/4, 0x4}, {&(0x7f0000007480)}, {&(0x7f00000074c0)=""/193, 0xc1}, {&(0x7f00000075c0)=""/176, 0xb0}, {&(0x7f0000007680)=""/187, 0xbb}, {&(0x7f0000007740)=""/134, 0x86}, {&(0x7f0000007800)=""/62, 0x3e}, {&(0x7f0000007840)=""/68, 0x44}], 0x9}, 0x2}], 0x5, 0xc0000022, &(0x7f0000007ac0)={0x77359400}) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x5, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$NS_GET_NSTYPE(r3, 0xb703, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x114, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xe4, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xd4, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x70, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x100, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffc482}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x20, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}, @IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ac0, 0x5ab}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x178735cd, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x800, 0x80000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfff, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x401}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffffff, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x7ff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x114}}, 0x0) 04:48:09 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x5, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000020000001bf84284beeff645f57e3b844eafaab4d88daf05c78bcab8504405492e62fdbf494864ad71dc7c9384c0a603196d5cf8d0e91554d4fa4128d1e0ddc3640211f85f46844f91deb59afbcb62e3f3079e98a57b97e7d4a7afd146734caedcb8954c6a3d1b4b2b912abc0869e3aae5f598e0267b153fbc175c1a2dc071265a8294842b92e730ed1b0c3d95", @ANYRES32=r6, @ANYBLOB="0813876b0e2771c6e06d44d5636a463923da2abaa7756ab0183ad9468808ea94470219f7e016c547bf61dcca82a017b011e64fab0bd337a475c71d7ac557bdb480fb245cffee59d6d8b1892cee42f70797209f1987c012c278a7867bfb5003297ddb19d14151c325583741f67129508dd15265cddaec874e70abddec5bbf24b5e7943a492d0c5a0ff0d5c172799fe682203c670901e14b4a35ac0d54480d36af47a22c23cac1e85862141c639f3dde3793b1ddf25c752cd9f3"], 0x30}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x10001}, {0x10000000000000, 0x100, 0xfffffffffffffffe}, 0x0, 0x6e6bb4, 0x80000000000001}, {{@in6=@dev={0xfe, 0x80, [], 0x28}, 0x80000000, 0x3c}, 0x0, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) r7 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm, @mss={0x2, 0x1000}, @sack_perm, @sack_perm, @window={0x3, 0x1}, @sack_perm, @timestamp, @window={0x3, 0x80, 0x4}, @mss={0x2, 0x6}, @mss={0x2, 0x1}], 0xa) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r8, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 04:48:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040), 0x22ea) 04:48:09 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48840}, 0x8000) recvmmsg(r0, &(0x7f0000005a80)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/155, 0x9b}], 0x2}}], 0x1, 0x100, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) shutdown(r0, 0x2) 04:48:09 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) r2 = socket$inet6(0xa, 0x803, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x1e, &(0x7f0000000100)={{{@in=@local, @in=@empty}}, {{@in=@dev}}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="471c92fa56687629e458e22dc927e7dbcbeeadd782f1150c3e23adf985fe3a391a8742da30b7ad89949d9c20aac89721e696c7d850fd3e32e8bccfc28be866826cf76d8777148b28a7b7001501d486114da41e346f4994a5a9e5eb3fd6d841a1cb24b6ab4576278a3c53f480a671e2600e06fca85120e31838b6b60780c230a4404719c54f38a815a4f8a60c55853489e6bddacdd498e1c4278283fb4547e80399ae9b628b9abc6d94e2d751ee75fd3c1613369a1e0de0f3df05d5c4c4907a91cde4ba007d", @ANYRESHEX=r0, @ANYRESOCT=r1], 0x44}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000000), 0xb, 0x0) [ 186.865196][ T9700] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 04:48:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040), 0x22ea) 04:48:11 executing program 0: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000000000000040000000a00010062617369630000002c000200280002800800010004ae00001c0002801800010000000400000000000c0001000001000000000000"], 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 04:48:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @local, @rand_addr=0x64010101}, 0xc) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x1c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 04:48:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x14, r2, 0x1}, 0x14}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x6009000000000000) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_FLOW={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x6000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400210100000000040000000a000000", @ANYRES32=r8, @ANYBLOB="14000100200642e9c360f16b010000000000000000000000000000a6a0c3cc500747eec01afc646ba5b51d2b5ac6b5c64f0625c63c4f7489b9158025df51cf4696bb5becf22132d56443bb58a3683f9aea920ec8371568fa659962d78d61d55dc6c0538fe56a9a17e3b91b1d50a8efa287a7795d2fe728cd05e1e9141b6dcc72383235d381c61529b232202490387dd5f2c2c6722784f696b9788e"], 0x2c}}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000280)=0x28) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_getroute={0x38, 0x18, 0x1, 0xfffffffd, 0x25dfdbfb, {}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_GATEWAY={0x14, 0x5, @local={0xfc, 0x0}}]}, 0x38}}, 0x0) 04:48:11 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x5, 0x0) sendmmsg$alg(r5, &(0x7f0000000140)=[{0x0, 0x0, 0x0}], 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c6e59830625a721abbf34cd9eaf1473fcf2bdef3eb18eaff142f1d9eb4f91aa1a2798d89aeed277033b5517f14d8fab1d684ca36b8aafc18f5e7c7dd6ad11c59ec7ac22a70fa4c023ee7e51b202c205a44ba53bbe66c7c8dee334f97d84ad2c277493c0e6f1286d917554fa4f520041f9fdb4968176163ec990517ead7d5ce7fe04a5ee82ba7ab3a24c533362af5d3bee3d45aaa347cc67f9083eaae0bf19da9229ae025b9c47155c6a6fa4345b5113296cd15ad575de085756e792bce83df1749be24146c43acaf9980d53be9c69cb6fadc52499213a0697ebc71d05878ca2301132acdc11857eb0ec549cde0b530187330c137244adadae0b60dcf2f08cb6fb62fd", @ANYRES32=0x0, @ANYBLOB="0000000000000000020000001bf84284beeff645f57e3b844eafaab4d88daf05c78bcab8504405492e62fdbf494864ad71dc7c9384c0a603196d5cf8d0e91554d4fa4128d1e0ddc3640211f85f46844f91deb59afbcb62e3f3079e98a57b97e7d4a7afd146734caedcb8954c6a3d1b4b2b912abc0869e3aae5f598e0267b153fbc175c1a2dc071265a8294842b92e730ed1b0c3d95", @ANYRES32=r6, @ANYBLOB="0813876b0e2771c6e06d44d5636a463923da2abaa7756ab0183ad9468808ea94470219f7e016c547bf61dcca82a017b011e64fab0bd337a475c71d7ac557bdb480fb245cffee59d6d8b1892cee42f70797209f1987c012c278a7867bfb5003297ddb19d14151c325583741f67129508dd15265cddaec874e70abddec5bbf24b5e7943a492d0c5a0ff0d5c172799fe682203c670901e14b4a35ac0d54480d36af47a22c23cac1e85862141c639f3dde3793b1ddf25c752cd9f3"], 0x30}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x10001}, {0x10000000000000, 0x100, 0xfffffffffffffffe}, 0x0, 0x6e6bb4, 0x80000000000001}, {{@in6=@dev={0xfe, 0x80, [], 0x28}, 0x80000000, 0x3c}, 0x0, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x0, 0x1, 0x3, 0x4, 0x0, 0x0, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) r7 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm, @mss={0x2, 0x1000}, @sack_perm, @sack_perm, @window={0x3, 0x1}, @sack_perm, @timestamp, @window={0x3, 0x80, 0x4}, @mss={0x2, 0x6}, @mss={0x2, 0x1}], 0xa) splice(r0, 0x0, r2, 0x0, 0x7fffffff, 0x0) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000040)="23000000220009bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r8, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f", 0x8}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 04:48:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x40) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000040), 0x22ea) [ 188.743439][ T9741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:11 executing program 2: unshare(0x40000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) r2 = socket$inet6(0xa, 0x5, 0x3) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, 0xffffffffffffffff, 0x10000000) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x0, 0x2, 0x0, 0xfc}}, 0xe8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e2800002600056bd25a80648c63940d0624fc6010000a400a0002000200000037153e370a00118004000000d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b10002c90000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf250a0000006000028008000200000000001c00038008000200ffffffff0800010022000000080001000500000004000400080002001f0000002c00038008000200fc07000008000100000000800800020007000000080001001f02000008000200ffffffff34000780080001000900000008000200faffffff0c0004005b0000000000000008000200fe0b00000c0004000100000001000000"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xd8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x840}, 0x41) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e22000026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) [ 188.846262][ T9747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.853811][ T9747] IPv6: NLM_F_CREATE should be set when creating new route [ 188.926631][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x20, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c044) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) [ 189.040452][ T9770] IPVS: ftp: loaded support on port[0] = 21 04:48:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x14, r2, 0x1}, 0x14}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x6009000000000000) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_FLOW={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x6000084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000010000507000200"/20, @ANYRES32=r7, @ANYBLOB="03000016010000001800120008000100736974000c00020008000300", @ANYRES32=r8], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400210100000000040000000a000000", @ANYRES32=r8, @ANYBLOB="14000100200642e9c360f16b010000000000000000000000000000a6a0c3cc500747eec01afc646ba5b51d2b5ac6b5c64f0625c63c4f7489b9158025df51cf4696bb5becf22132d56443bb58a3683f9aea920ec8371568fa659962d78d61d55dc6c0538fe56a9a17e3b91b1d50a8efa287a7795d2fe728cd05e1e9141b6dcc72383235d381c61529b232202490387dd5f2c2c6722784f696b9788e"], 0x2c}}, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r5, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000280)=0x28) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@ipv6_getroute={0x38, 0x18, 0x1, 0xfffffffd, 0x25dfdbfb, {}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_GATEWAY={0x14, 0x5, @local={0xfc, 0x0}}]}, 0x38}}, 0x0) 04:48:11 executing program 0: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x80, 0x4, 0x40, @private2={0xfc, 0x2, [], 0x1}, @mcast1, 0x7, 0x40, 0x75, 0x39}}) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x800}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xab}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}]}, 0xc4}}, 0x2400a081) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38becc027ab60000", @ANYRES16=0x0, @ANYBLOB="000228bd7000fcdbdf250e00000008000300", @ANYRES32=r0, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB="0a0009000000000000000000080031007f000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r3 = socket$inet6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f0000000280)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffffffe}}, @flowinfo={{0x14, 0x29, 0xb, 0x4ff8e3e8}}], 0x30}}], 0x2, 0x0) [ 189.134973][ T9775] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 189.184950][ T9775] netlink: 8702 bytes leftover after parsing attributes in process `syz-executor.2'. 04:48:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r2, &(0x7f0000000040), 0x22ea) [ 189.580160][ T9812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.587438][ T9812] IPv6: NLM_F_CREATE should be set when creating new route 04:48:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308, 0x9}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 04:48:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x1c}}, 0x4091) 04:48:12 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket(0x22, 0x800, 0x2) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000000c0), 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffcfd, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0xc8, 0xa, 0x6, 0xb00, 0x0, 0x0, {0xc, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x288}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x70, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @random="97f10ea10a82"}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond_slave_1\x00'}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3f}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x9}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xc}, @IPSET_ATTR_COMMENT={0xd, 0x1a, '$(!,,([&\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x44000}, 0xf42a39b08d5e684) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x4}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xae24}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x60}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 189.663224][ T9770] IPVS: ftp: loaded support on port[0] = 21 04:48:12 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x81, 0x9}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e22, 0x400, @mcast1, 0x10001}}}, 0x84) r2 = accept(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d960000000000000000000000000000000000000000864800"/344], 0x158) [ 189.710206][ T9780] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 189.735054][ T9780] netlink: 8702 bytes leftover after parsing attributes in process `syz-executor.2'. 04:48:12 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 189.801500][ T9828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:12 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_sys\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f0000000080)}, {0x0}], 0x2) sendto$inet6(r0, 0x0, 0x0, 0x46812, 0x0, 0x0) shutdown(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='\n', 0xfffffdef, 0x46812, 0x0, 0x1f4) shutdown(r3, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) sendto$inet6(r4, &(0x7f0000000200)='\n', 0xfffffdef, 0x46812, 0x0, 0x1f4) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000018c0)={{r2}, 0x0, 0x0, @unused=[0x1000, 0x1, 0x7ff, 0xa7], @devid}) syz_emit_ethernet(0x3a, 0x0, 0x0) [ 190.013372][ T9828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.041546][ T9863] IPVS: ftp: loaded support on port[0] = 21 04:48:12 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88882, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @multicast2}}) write$tun(0xffffffffffffffff, &(0x7f0000007180)=ANY=[@ANYBLOB="001b0000ffffffff0d00aaaaaaaaaaaa08ff"], 0x15) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x8010, r5, 0xac19e000) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x18100, 0x0) [ 190.451429][ T9863] IPVS: ftp: loaded support on port[0] = 21 [ 191.817956][ T7] tipc: TX() has been purged, node left! 04:48:15 executing program 2: unshare(0x40000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) r2 = socket$inet6(0xa, 0x5, 0x3) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, 0xffffffffffffffff, 0x10000000) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x0, 0x2, 0x0, 0xfc}}, 0xe8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e2800002600056bd25a80648c63940d0624fc6010000a400a0002000200000037153e370a00118004000000d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b10002c90000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf250a0000006000028008000200000000001c00038008000200ffffffff0800010022000000080001000500000004000400080002001f0000002c00038008000200fc07000008000100000000800800020007000000080001001f02000008000200ffffffff34000780080001000900000008000200faffffff0c0004005b0000000000000008000200fe0b00000c0004000100000001000000"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xd8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x840}, 0x41) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e22000026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 04:48:15 executing program 3: accept(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000080)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x30b5dcdb, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0xffffffffffffffff}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffff47, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48}, 0x4004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x801, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x3}, @NFTA_SET_OBJ_TYPE={0x8}]}], {0x14}}, 0x74}}, 0x0) 04:48:15 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x81, 0x9}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e22, 0x400, @mcast1, 0x10001}}}, 0x84) r2 = accept(r0, 0x0, 0x0) write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008d960000000000000000000000000000000000000000864800"/344], 0x158) 04:48:15 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:15 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:15 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) accept4(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000080)=0x80, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x8, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) [ 193.131998][ T9940] IPVS: ftp: loaded support on port[0] = 21 04:48:15 executing program 3: unshare(0x40000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) r2 = socket$inet6(0xa, 0x5, 0x3) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, 0xffffffffffffffff, 0x10000000) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x0, 0x2, 0x0, 0xfc}}, 0xe8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e2800002600056bd25a80648c63940d0624fc6010000a400a0002000200000037153e370a00118004000000d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b10002c90000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf250a0000006000028008000200000000001c00038008000200ffffffff0800010022000000080001000500000004000400080002001f0000002c00038008000200fc07000008000100000000800800020007000000080001001f02000008000200ffffffff34000780080001000900000008000200faffffff0c0004005b0000000000000008000200fe0b00000c0004000100000001000000"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xd8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x840}, 0x41) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e22000026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) 04:48:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 193.231084][ T9948] IPVS: ftp: loaded support on port[0] = 21 [ 193.262033][ T9949] IPVS: ftp: loaded support on port[0] = 21 [ 193.372235][ T9965] netlink: 'syz-executor.2': attribute type 11 has an invalid length. 04:48:16 executing program 5: socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000340), &(0x7f0000000380)=0x8) socket(0x10, 0x803, 0x0) socket$inet(0x10, 0x2, 0x0) socket(0x10, 0x80002, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040), 0x4) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x6009000000000000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0xf8, r4, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x35, 0x3, "20340936a30be1b1d28f731944d73377d46ae4f8e913e80fc3dafa1dba1d3eecd53bd7b45993425de9f08198435c1b3fad"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x6000c805}, 0x20000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c00000010000304000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="03020000000000002c00128009000100766c616e000000001c00028006000100000000000c0002000e0000000a00000004000380080005095242320494831ba43645033633f798b124e30fe1fa2800b5397d78b4f533ccf8ab219aa90a076c5af6c849aa", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}}, 0x0) [ 193.422040][ T9965] netlink: 8702 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.475903][ T9984] IPVS: ftp: loaded support on port[0] = 21 [ 193.647769][T10029] netlink: 'syz-executor.3': attribute type 11 has an invalid length. 04:48:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 193.732961][T10029] netlink: 8702 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.804013][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 04:48:16 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000001280)={0x1cc, 0x2, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_PROTOINFO={0x58, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x54, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x0, 0x3f}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x3, 0x3}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x8, 0x33}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x8, 0x7f}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x9}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x6d}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1f}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x7, 0x7}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0x7}}]}}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @private=0xa010100}}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0xf8, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}]}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}, @CTA_NAT_PROTO={0x4}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100001050000000000000000fb000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012000c000100626f6e64000000002c00020008001bf1758cd42910fad89500000000000800010005000000080002006303763cb3fa3d2e9bbbe37258", @ANYRES32=r2], 0x5c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="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", 0x1000}], 0x1, &(0x7f0000000100)}], 0xea, 0x0) 04:48:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 194.120274][T10073] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 04:48:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:16 executing program 2: unshare(0x40000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) r2 = socket$inet6(0xa, 0x5, 0x3) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0)=0x4, 0x4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, 0xffffffffffffffff, 0x10000000) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x0, 0x3c}, 0x2, @in6=@private2={0xfc, 0x2, [], 0x1}, 0x0, 0x2, 0x0, 0xfc}}, 0xe8) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e2800002600056bd25a80648c63940d0624fc6010000a400a0002000200000037153e370a00118004000000d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b10002c90000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fcdbdf250a0000006000028008000200000000001c00038008000200ffffffff0800010022000000080001000500000004000400080002001f0000002c00038008000200fc07000008000100000000800800020007000000080001001f02000008000200ffffffff34000780080001000900000008000200faffffff0c0004005b0000000000000008000200fe0b00000c0004000100000001000000"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xd8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x840}, 0x41) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e22000026000511d25a80648c63940d0424fc60100016400a0002000200000037153e370a00018004000000d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) [ 194.288450][T10113] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.377990][ T9940] IPVS: ftp: loaded support on port[0] = 21 04:48:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:17 executing program 4: unshare(0x6c060000) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e19b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(r1, &(0x7f0000000400)='devices.list\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$CAIFSO_REQ_PARAM(r3, 0x116, 0x80, &(0x7f0000000080)="73fc9412adda794dbb864b1730059d4526d8369bc2630a3ede7156a7193ccf19a8fcb3120e4beba9568cd3fe4abe768d94c48dafbc8e7f135f39252554cc2ab17c9d23cacbf48d73793d6cd07445b5f7f1535c8a08798eea6e753b062e926b53b1df9426713a8eee40dfa817a124a2cf97d22304432e63262d6adab2a14facb019707c7ece84212677b92ab06956259c8cbed873ac5257b71210243b6e67e92c78f8eaeaea144276535fa906d2135bc42d9c3a5e521ec055653a74317c1b816a46c0b0d241e646bf15176cf4a7600c2551fa8efd71eb714c1af646", 0xdb) r4 = accept$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000280)=0x1c) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f00000002c0)=""/222, &(0x7f00000003c0)=0xde) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="d008e0c27ff73eac00002400ffffff7f0b000000fdffa6fffff76c5a3c9a3320b36a4c0100000000000000431e04446fdcdebb65563d8e7272272f8153a6456b2b33d0779517e468f79289105a48db311f33b88967e2bbe5d9ec2f7eba04d23f71ea48e6fc6b069d31f92e", @ANYRES16=r1, @ANYBLOB="00000001f1ffffff000000000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000d0000000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000000000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c0000000800000100008000000000000000004000000000fefffff67d000004000000ff01000002000000000000024000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff05000000060000000700000003000000100005"], 0x8d0}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000440)={@mcast2, 0xc, r5}) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) r6 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) [ 194.450599][T10122] IPVS: ftp: loaded support on port[0] = 21 [ 194.572535][T10135] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 194.666137][T10135] netlink: 8702 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.728869][T10150] IPVS: ftp: loaded support on port[0] = 21 04:48:18 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f00000007c0), 0x4) accept4(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000080)=0x80, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x8, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000180)={0x0, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, 0x0, 0x0) 04:48:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:18 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d17dda5b9134e259860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x7f}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xc080) close(r0) 04:48:18 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000180)={'vcan0\x00', 0x200}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_x25_SIOCDELRT(r2, 0x890b, &(0x7f0000000100)={@remote={[], 0x3}, 0x3, 'ip6gretap0\x00'}) ioctl$FIOCLEX(r2, 0x5451) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000440)="dad4a56736672a6189a3ce5bedd1e2041234d8b9b40e20640c8921339c420a3201a1630c805912ff09da16d67ac06d14bc2b55aa452844ebd5806d0ea273b33322f380204a909cb10a6fa04f95db96e692822c3300551fbe550b2d6b07f89d342ebffe0c2e69face08802a6c938d895c4daec656b658be178ec620f34c1bcfb48465702d66c8dc844a39e13ca7adcaeb109c84f48930c2703a47dc24369f8e18035a8f70e4656c73e12326d3b45b81a55c1d61e094655fcdd32b151078369a254852d385d2f4becc080c7fd33462", &(0x7f00000006c0)=""/149}, 0x20) getsockopt$inet_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000400)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000000c) accept$inet6(r1, &(0x7f0000000580)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000300)=0xffffff95) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x5, &(0x7f0000000540)=0x8000, 0x4) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e24, @private=0xa010101}, 0x201, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)='ip6gretap0\x00', 0x1, 0x3}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000200)=0x3, 0x4) r4 = socket$inet6(0xa, 0x80000, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e64, 0x3a, @loopback, 0xaf8}, {0xa, 0x4e24, 0x0, @mcast1, 0x3ff}, 0x7, [0x9, 0x2, 0x1, 0x1, 0x5, 0x800, 0x8, 0x8ab4]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e23, 0xfffffff9, @mcast1, 0x1}, {0xa, 0x4e23, 0x4, @empty, 0x3}, 0x7, [0x6, 0x0, 0x2, 0x1, 0x7ff, 0x7fff, 0x8, 0x1]}, 0x5c) 04:48:18 executing program 2: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x6, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r3}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r3, 0xfffffbff, 0x28}, 0xc) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$l2tp6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x20) connect$inet6(r4, &(0x7f0000004540)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg(r4, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}}], 0xbb00, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000180)='syzkaller1\x00') ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000e40187f31acbbd406e0d7adb7edd0029380001907c64010100ac1408bb44140b01e00000010000780000000000000000000000000000000039e70000000000000000000000000000000100000000000000"], 0x46) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f0b000000fdffa6fffff7", @ANYRES32=r5, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000004240)={&(0x7f0000004180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000004200)={&(0x7f00000041c0)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4801) 04:48:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x20}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2a009053", @ANYRES16=r4, @ANYBLOB="000329bd7000fbdbdf25010000000000000001410000201800171e00000c000010db9609ee696ac40606a6c200ff7564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) [ 195.875239][T10231] IPVS: ftp: loaded support on port[0] = 21 [ 195.910430][T10232] IPVS: ftp: loaded support on port[0] = 21 04:48:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 195.992528][T10244] IPVS: ftp: loaded support on port[0] = 21 04:48:18 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d17dda5b9134e259860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x7f}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xc080) close(r0) 04:48:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x20}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2a009053", @ANYRES16=r4, @ANYBLOB="000329bd7000fbdbdf25010000000000000001410000201800171e00000c000010db9609ee696ac40606a6c200ff7564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) 04:48:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 196.343906][T10232] IPVS: ftp: loaded support on port[0] = 21 04:48:19 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x20}) pwrite64(r1, &(0x7f00000002c0)='_', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000140)={0x20}) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="93b20000000000000000010000000000000001410000001c001700020000000000006574683a73797a6b616c6c657231"], 0x38}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2a009053", @ANYRES16=r4, @ANYBLOB="000329bd7000fbdbdf25010000000000000001410000201800171e00000c000010db9609ee696ac40606a6c200ff7564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)) 04:48:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x400}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) connect$inet6(r0, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) close(r0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) 04:48:20 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000200)=0x1, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x9, @rand_addr, 0x6}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="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", 0x19b, 0x44, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="216addf08e32b751b6e26a08fbb6473509f7bb367468f9120a4796c5a61169f3b3356ddbd2f46b0db5f6ec3544278ec903ff1589c646722aca51a7e2bb6f968ba4ca25d3786f96d1dc6675156c786b99cd2912a00369e126e4937f86836dccb544d978c595560c6ebe36b39193a17138c1bf619060338f72aa4208267b13ed025821a6c50043c45dd116e36c12d3675c5e91e4d71d3fd4d4d49afea8652077fae25fd3964b9e4da427733706e27b0ed327f73837bcfb1e8de35ed85f9508f0c6a957f0e8e511aac6ac14bbb9db6ac39015453538a2dcfe74977e5fe5f922eb34548f3d3bd125a02caaf23b0815239bd3", 0xf0}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x4, 0xc0010103, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) sendmsg$can_raw(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="baa21c59c4d352ad56a85b4048b0d1605e2008c21950ab22497bfd0ef4e88a20647962ff0f7000019ea0d4ed676657ada69336b46be7e40dbba1a089d1d30e04f41669d9b8cc8a88d397340e9ad966a46a9203cfab8bb8ac1b783abac18ac79a6103e928a68ab50435aa710220746dabe00c4183f2a67951df9703d4e4da7e2a82444151a38069febf0ff42138137d91e0fb00004014ad9271ece37ab0dfaa50d7f25d5306398d0e9113d9b58c72ee21984afa7f0000000000000000000000000000a25c2473a55f10dc426b30183448ce656c341802462a61f51e2f897e4bd900"/236], 0xc9) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x5, 0x8}, 0x10) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000300)={0x4, 0x2b5, 0x1, 0x6, 0xffffffffffffffe0}) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000100231d8568261baba20400ff7e", 0x24}], 0x1}, 0x0) r7 = socket$inet(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000003c0)={@private1={0xfc, 0x1, [], 0x1}}, 0x14) sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000100231d8568261baba20400ff7e", 0x24}], 0x1}, 0x0) ppoll(&(0x7f0000000040)=[{r1}, {r5, 0x4}, {r3}, {r6}, {r7, 0x108}, {0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x11}], 0x7, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180), 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$cgroup_subtree(r8, &(0x7f00000001c0)=ANY=[], 0xfffffcbe) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x14, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000000301ffff808fdb003d88c8f00010ae1b1b21a95ab216d2709aec2a323d1feed8a99f158d740d3a7e180b2d8d2ce1d3a83e0eddc9fe3e44bde933dea81d1c7c36e91ff7f3a3a8bcd1bb4b7763add5ea73a74067ca0bb8dd3b87e979cac7131c9dc125090a4b9e13eba05778a03d93d7fb1f0c6c3b6e9f396f9cc58265c20aefadbdafe954fa47e2f584d8f28f7015531e226f44ea6329e3b45717551e97e467376ba20ca0d94db946bdafe34aec8bae7d696a675e8910e2a9b2093efb1081b8dcff487085595a1a4b6de75a2d0300000077d13ebfd9cdc97c402ad7943f337e5fb64a84a913289db3758f44d110efb7b7d8b6cb864b770d330958a774790b6e228d14cd93a69fbc6d2b4172389fc7cc560fb84f160a06b00443f988c0f3b45d0166ee8748672a4d0ccc107ec744cc305fc7e35b7e857f6a5cf9a8a815310095b4b2bd3689bc7da7ac34612384eddbca00000078090018cecce292e8e1928d34723a11d34fa30d2fc3b7e99afc255593c7a2d52a51241c6ef053f6734668cdb7f7db77c60983c97407af637ef68c3ab7482ea809a47d6458fe4e8076d291ac3123245c1c8d711ab0306c1e899580a5c697aa90ab88b521861847afcb02cb4f4e3da5cad7c633205abe6c5f4ca2cda61fab32948ff0c75526c645ec25374116760af8f680ac7788e936a9eb3c48415bed407358ebb9566d2d044cdffdc7ae3617a61d7c415d039700e87211759adf529b4469cb9e6c7377962d6559c431d7c4506522c0472a61ef7ca8ca4850fba55e99bd8769a25793f802e5c84dae0b8bcb9be7f8354dd02c014dee69af553b43f1ea38e3ab2c29c344a5ed4d6945f87e"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r9, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 04:48:20 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0xfffffffe, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1a000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000140)={0x18, 0x0, {0x2, @dev={[], 0x3f}, 'ip_vti0\x00'}}) [ 197.575218][ T7] tipc: TX() has been purged, node left! [ 197.586388][ T7] tipc: TX() has been purged, node left! [ 197.598594][ T7] tipc: TX() has been purged, node left! [ 197.631207][T10376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.654120][T10236] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 197.791925][ T7] tipc: TX() has been purged, node left! [ 197.803372][ T7] tipc: TX() has been purged, node left! [ 197.866740][ T7] tipc: TX() has been purged, node left! [ 197.919370][ T7] tipc: TX() has been purged, node left! [ 197.944716][ T7] tipc: TX() has been purged, node left! [ 197.961483][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.989649][ T7] tipc: TX() has been purged, node left! [ 197.995713][ T7] tipc: TX() has been purged, node left! [ 198.020762][ T7] tipc: TX() has been purged, node left! 04:48:20 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000200)=0x1, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x9, @rand_addr, 0x6}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="a78c99cd2198f242218967ae6792421d67f182d9e7dc4e59f7275677317e962a31a66baf81f69a7e528dba85f12474abbc0235001a96e44c2635a6ad00de44cc9effa0441f2494f3a908c237b03c0a0ca802f43cd9f5778fa0e70489cdc21913b54682b03cc443683cdeb8f9b3f546beb409e699ac11826bacecb49747091719cc85a9cd7910a6ec55539fb538f7077a396f1ade4a2dae448568caf3f8949aff551d43e94f90a0d4ee355be43dd8e903458353972f32113d1b667068b6a4c54bea096111fe39e21c143d6409040c3629a819bdaa52d0b7926ae9b15bc9e6965e2f4d605bb50ddd97ea7d9717dc719837aeb018d418e6f44085d1e4d43ae60d83748f36a0cbf91afebf2401676ad3e4b553990ac722114ebb4dd853aafa463e4d1fa6c9d3e63964b7a4919d4f5671817f677c2a082b9d3be0e23e98989bfe2ec02a7a38fa3095997dc877626c44b6edccbc4384889121d9b20f1adc045dc440a044f5a7d0d8cb3a8369433f77375392bc143349f6c6b619f1fc85405962ceef49c16ba83c2b6187089e6063c1460f91716ccffa4e9e377f2b1882fb", 0x19b, 0x44, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="216addf08e32b751b6e26a08fbb6473509f7bb367468f9120a4796c5a61169f3b3356ddbd2f46b0db5f6ec3544278ec903ff1589c646722aca51a7e2bb6f968ba4ca25d3786f96d1dc6675156c786b99cd2912a00369e126e4937f86836dccb544d978c595560c6ebe36b39193a17138c1bf619060338f72aa4208267b13ed025821a6c50043c45dd116e36c12d3675c5e91e4d71d3fd4d4d49afea8652077fae25fd3964b9e4da427733706e27b0ed327f73837bcfb1e8de35ed85f9508f0c6a957f0e8e511aac6ac14bbb9db6ac39015453538a2dcfe74977e5fe5f922eb34548f3d3bd125a02caaf23b0815239bd3", 0xf0}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x4, 0xc0010103, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) sendmsg$can_raw(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="baa21c59c4d352ad56a85b4048b0d1605e2008c21950ab22497bfd0ef4e88a20647962ff0f7000019ea0d4ed676657ada69336b46be7e40dbba1a089d1d30e04f41669d9b8cc8a88d397340e9ad966a46a9203cfab8bb8ac1b783abac18ac79a6103e928a68ab50435aa710220746dabe00c4183f2a67951df9703d4e4da7e2a82444151a38069febf0ff42138137d91e0fb00004014ad9271ece37ab0dfaa50d7f25d5306398d0e9113d9b58c72ee21984afa7f0000000000000000000000000000a25c2473a55f10dc426b30183448ce656c341802462a61f51e2f897e4bd900"/236], 0xc9) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x5, 0x8}, 0x10) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000300)={0x4, 0x2b5, 0x1, 0x6, 0xffffffffffffffe0}) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000100231d8568261baba20400ff7e", 0x24}], 0x1}, 0x0) r7 = socket$inet(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000003c0)={@private1={0xfc, 0x1, [], 0x1}}, 0x14) sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000100231d8568261baba20400ff7e", 0x24}], 0x1}, 0x0) ppoll(&(0x7f0000000040)=[{r1}, {r5, 0x4}, {r3}, {r6}, {r7, 0x108}, {0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x11}], 0x7, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180), 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$cgroup_subtree(r8, &(0x7f00000001c0)=ANY=[], 0xfffffcbe) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x14, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r9, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 04:48:20 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x7, &(0x7f0000000040), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={0x10c, 0x1, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_TUPLE={0x88, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xf1}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40001) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xc040000, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40004002) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000740)={0x7, 'bridge_slave_1\x00', {0x4}, 0x7fff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_type(r4, &(0x7f0000000080)='threaded\x00', 0xfffffc61) close(r4) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r4}, 0x40) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000140)=0x1, 0x4) clock_gettime(0x3, &(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565, 0x5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}}, 0x0) 04:48:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0xa4d976) r1 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x6074, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c008105e00f80ecdb4cb9f207a07e4f1e000000880305fb12000200030ada1b40d805000300c50083b8", 0x2e}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000906010110000000000000000000000005000100060000000c00078008000940000000000900020073797a30"], 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0xfd, "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"}, &(0x7f0000000140)=0x105) sendfile(r3, r2, 0x0, 0x100000001) 04:48:20 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x400}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) connect$inet6(r0, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) close(r0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) 04:48:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:20 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x4) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000200)=0x1, 0x4) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x9, @rand_addr, 0x6}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="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", 0x19b, 0x44, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="216addf08e32b751b6e26a08fbb6473509f7bb367468f9120a4796c5a61169f3b3356ddbd2f46b0db5f6ec3544278ec903ff1589c646722aca51a7e2bb6f968ba4ca25d3786f96d1dc6675156c786b99cd2912a00369e126e4937f86836dccb544d978c595560c6ebe36b39193a17138c1bf619060338f72aa4208267b13ed025821a6c50043c45dd116e36c12d3675c5e91e4d71d3fd4d4d49afea8652077fae25fd3964b9e4da427733706e27b0ed327f73837bcfb1e8de35ed85f9508f0c6a957f0e8e511aac6ac14bbb9db6ac39015453538a2dcfe74977e5fe5f922eb34548f3d3bd125a02caaf23b0815239bd3", 0xf0}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.controllers\x00', 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x4, 0xc0010103, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) sendmsg$can_raw(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="baa21c59c4d352ad56a85b4048b0d1605e2008c21950ab22497bfd0ef4e88a20647962ff0f7000019ea0d4ed676657ada69336b46be7e40dbba1a089d1d30e04f41669d9b8cc8a88d397340e9ad966a46a9203cfab8bb8ac1b783abac18ac79a6103e928a68ab50435aa710220746dabe00c4183f2a67951df9703d4e4da7e2a82444151a38069febf0ff42138137d91e0fb00004014ad9271ece37ab0dfaa50d7f25d5306398d0e9113d9b58c72ee21984afa7f0000000000000000000000000000a25c2473a55f10dc426b30183448ce656c341802462a61f51e2f897e4bd900"/236], 0xc9) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x5, 0x8}, 0x10) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000300)={0x4, 0x2b5, 0x1, 0x6, 0xffffffffffffffe0}) r5 = socket$l2tp(0x2, 0x2, 0x73) r6 = socket$inet(0x10, 0x3, 0xc) sendmsg(r6, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000100231d8568261baba20400ff7e", 0x24}], 0x1}, 0x0) r7 = socket$inet(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000003c0)={@private1={0xfc, 0x1, [], 0x1}}, 0x14) sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r7, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000020307031dfffd946ff20c0020200a0009000100231d8568261baba20400ff7e", 0x24}], 0x1}, 0x0) ppoll(&(0x7f0000000040)=[{r1}, {r5, 0x4}, {r3}, {r6}, {r7, 0x108}, {0xffffffffffffffff, 0x140}, {0xffffffffffffffff, 0x11}], 0x7, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180), 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$cgroup_subtree(r8, &(0x7f00000001c0)=ANY=[], 0xfffffcbe) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x14, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r9, &(0x7f00000013c0), 0x4a5, 0x200002, &(0x7f0000000c40)={0x77359400}) 04:48:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 198.436525][T10408] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 198.445903][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 198.445916][ T28] audit: type=1804 audit(1600490901.097:58): pid=10420 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir643369579/syzkaller.bVHPp6/36/cgroup.controllers" dev="sda1" ino=16054 res=1 errno=0 [ 198.473571][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.527190][T10408] device gretap0 entered promiscuous mode [ 198.563394][T10422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.636545][T10408] device gretap0 left promiscuous mode 04:48:21 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x400}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) connect$inet6(r0, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) close(r0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) 04:48:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:21 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10012, r1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffff801}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x27c4}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ea7f987}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0xc081}, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, 0x0, &(0x7f0000000040)) 04:48:21 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f0b000000fdffa6fffff7", @ANYRES32=r1, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xff}]}, 0x71}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x10, 0x2}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 04:48:21 executing program 2: socket$inet(0x2, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) poll(0x0, 0x0, 0x0) 04:48:22 executing program 0: ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0xc8, 0xee010217, 0x34, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote={0xfe, 0x80, [0x0, 0x7a]}, @rand_addr=' \x01\x00', [], [], 'bridge0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28, 'socket\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @remote}, @loopback={0x0, 0x1200}, [], [], 'veth0_to_team\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0xb8}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 04:48:22 executing program 3: sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="ac0000000001190500000000000000000a0000003c0001002c0001001400030016f8bcd3832f9b1577def13edac1b8bf14000400fe8000000000000000000001000000bb0c00020005000100000000003c0002000c00020005000100000000002c00010014000300fe8800000000000000000000000000011400040000010000000000000000000000000001080007000000000018000600140004"], 0xac}}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0xe, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44883}, 0x4040044) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0x0) 04:48:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:22 executing program 5: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x59) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800c68ec7c02f56e2fe1fc78c0c5cec66e64b1ce677e84f3f3a0000", @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32=r3, @ANYBLOB], 0x48}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 04:48:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}}]}, 0x40}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x438, 0x3f3, 0x300, 0x70bd29, 0x25dfdbfe, {0x3, 0x2, 0x2e, [0x9, 0x2498, 0x400, 0x2, 0x0, 0x9, 0x200, 0x442, 0x1c, 0x5, 0x9, 0x1, 0x7fff, 0x80, 0x4, 0xfffffb82, 0x3000, 0xc7d4ab4, 0x0, 0x4, 0x7, 0x0, 0x2, 0x8ec, 0x2, 0x0, 0xa, 0x2000000, 0x2, 0xffff7b7f, 0x8, 0x20, 0x6, 0x400, 0x7, 0x5, 0x6, 0x69d, 0x8, 0x401, 0x4f67, 0x5, 0xffff7fff, 0x1, 0x1, 0xfffffffa, 0x84c4, 0x7, 0x3, 0x7fff, 0x7, 0xd1, 0x6, 0x2, 0x5, 0x4, 0x0, 0x4, 0x7, 0x6, 0xffffffff, 0x7fc00000, 0x3, 0x80000000], [0x200, 0x2, 0x3, 0x80, 0xfe000000, 0x5f, 0x9, 0x2, 0x3, 0xf93, 0xfff, 0x2, 0x7fff, 0x5, 0x6, 0x8, 0x8, 0x6, 0x7ff, 0x6, 0x8, 0xc2e, 0x0, 0x3, 0x85c, 0xff, 0x3, 0x2, 0x8, 0x2, 0x3, 0x8, 0x56, 0xae9, 0x0, 0x4, 0x8ce, 0x7, 0x9000000, 0x5, 0x6, 0x7fff, 0x7ff, 0x2, 0x4, 0x6, 0x2, 0x8, 0x4, 0xb27, 0x8, 0x5, 0x5, 0x5, 0x1, 0x0, 0x7, 0x800, 0x0, 0x3, 0x0, 0x4, 0x1000, 0x40], [0x7, 0x2, 0x736, 0xfffffffe, 0x1800, 0x10000, 0xfffff800, 0x2, 0x6, 0x10001, 0x3, 0x20, 0xff6, 0x20, 0x9, 0x1ff, 0x1ff, 0x6667, 0x7, 0x8000, 0x9ea, 0xff, 0x6, 0x3, 0x99, 0x2, 0x8, 0xfffff001, 0x0, 0x7, 0x3, 0x1, 0xb59dbc3, 0x7fffffff, 0x78, 0xa2b845, 0xeed, 0x3, 0x1000, 0xab1, 0xa919, 0x15c5, 0xa5a5, 0x3f, 0x40, 0xb2, 0x9, 0x8000, 0x1ff, 0x1, 0x0, 0x8001, 0x7, 0x200, 0x2, 0x3, 0x4, 0x321, 0x2, 0x8000, 0x0, 0x7, 0xfffffffb, 0x3f], [0xffffffff, 0x53, 0x10001, 0x2, 0x3, 0x80000001, 0x5, 0x8, 0x1, 0x4, 0x4, 0x2, 0xff, 0xffff, 0x9, 0x7, 0x8, 0x1, 0x76, 0xffff0001, 0x7, 0x400, 0x7, 0x100, 0xb0793851, 0x7, 0x4, 0x0, 0x6, 0xfffffffb, 0x1, 0x101, 0x6, 0x9, 0x80000001, 0x4, 0x7, 0xff, 0x6, 0x526a, 0x8a, 0x7, 0x20, 0xfffffc01, 0x10001, 0xfff, 0x9, 0x100, 0x2, 0xd9, 0xd4, 0x0, 0x1, 0x0, 0x4, 0xfffff86a, 0x1ff, 0x40, 0x0, 0xffffffff, 0x6, 0x8, 0x4, 0x7fff], 0x15, ['bridge\x00', 'bridge\x00', 'bridge\x00']}, ["", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) [ 199.990919][T10466] IPVS: ftp: loaded support on port[0] = 21 04:48:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 200.033955][T10472] Cannot find add_set index 0 as target 04:48:22 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1bb801, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="3726b2625d9d3e33239c7715f453a83510ac032fb6584ca64ca5a18fc4498beae3afbd28b1c4728d8e95261fdbd157afda5f86b9a389ae2f5f66502922b2ce1be2f4848174a3ac11cd33045931c3d72e116fa6859f4d7422d0afa8ce1c9dce079ca4c9e0d5b2a15a491bf6211d9fa6a3377dd0e10b8cbb496fb04abc8569759caea2d661206436739dc7a5651d8ad9f2214cb529fb8bf538418e4ea74d124459d5fbbb", 0xa3) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x10}, 0xc) ioctl$PPPIOCSNPMODE(r0, 0x4010744d, &(0x7f0000000040)={0x40003f}) [ 200.085989][T10475] Cannot find add_set index 0 as target 04:48:22 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005070000000000000000000000004ab1c28840fe025767f9081d905f8f8c49a9a1b00eb7480732eb6370271f0f544ff167b9760c58138b4ae38d136efec355cf8b10c36d4e27f9df190e30e1732e3f2b3a8ab4b12744bf40e6fc75cb4c2bd9762955be3fedbe0590104281671b9c0b0620cae1bb97387aacfa41d931b074b82f240e1531c66b49a7180c881765a6702d715d0e7d", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0x4}}]}, 0x30}}, 0x0) 04:48:22 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, 0xffffffffffffffff, 0x6f409000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x5c, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 'ovf\x00', 0x1, 0x4, 0x58}, 0x2c) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x20008801) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x3e9, 0x0, 0x0, 0x25dfdbfb, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd}, [""]}, 0x38}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f3, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x3]}}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) 04:48:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:23 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f00000000c0)='GPL\x00', 0x10000, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) clock_gettime(0x0, &(0x7f0000004f00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004d40)=[{{&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/156, 0x9c}, {&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f0000000080)=""/17, 0x11}, {&(0x7f0000000100)=""/115, 0x73}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000480)=""/86, 0x56}, {&(0x7f0000000500)=""/190, 0xbe}], 0x7, &(0x7f0000000640)=""/63, 0x3f}, 0x2}, {{&(0x7f0000000680)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/12, 0xc}, {&(0x7f0000001740)=""/146, 0x92}, {&(0x7f0000001800)}, {&(0x7f0000001840)=""/3, 0x3}], 0x5, &(0x7f0000001900)=""/116, 0x74}, 0xffff8000}, {{&(0x7f0000001980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a00)=""/227, 0xe3}, {&(0x7f0000001b00)=""/123, 0x7b}], 0x2, &(0x7f0000001bc0)=""/54, 0x36}, 0xffff8001}, {{&(0x7f0000001c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001c80)=""/243, 0xf3}, {&(0x7f0000001d80)=""/131, 0x83}, {&(0x7f0000001e40)=""/227, 0xe3}], 0x3, &(0x7f0000001f80)=""/32, 0x20}, 0x400}, {{&(0x7f0000001fc0)=@rc={0x1f, @none}, 0x80, &(0x7f0000002340)=[{&(0x7f0000002040)=""/112, 0x70}, {&(0x7f00000020c0)=""/44, 0x2c}, {&(0x7f0000002100)=""/21, 0x15}, {&(0x7f0000002140)=""/105, 0x69}, {&(0x7f00000021c0)=""/134, 0x86}, {&(0x7f0000002280)=""/143, 0x8f}], 0x6, &(0x7f00000023c0)=""/4096, 0x1000}, 0x2f}, {{&(0x7f00000033c0)=@isdn, 0x80, &(0x7f00000046c0)=[{&(0x7f0000003440)=""/45, 0x2d}, {&(0x7f0000003480)=""/73, 0x49}, {&(0x7f0000003500)=""/119, 0x77}, {&(0x7f0000003580)=""/52, 0x34}, {&(0x7f00000035c0)=""/193, 0xc1}, {&(0x7f00000036c0)=""/4096, 0x1000}], 0x6, &(0x7f0000004740)=""/62, 0x3e}, 0x8000}, {{&(0x7f0000004780)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000004c80)=[{&(0x7f0000004800)=""/46, 0x2e}, {&(0x7f0000004840)=""/246, 0xf6}, {&(0x7f0000004940)}, {&(0x7f0000004980)=""/255, 0xff}, {&(0x7f0000004a80)=""/158, 0x9e}, {&(0x7f0000004b40)=""/176, 0xb0}, {&(0x7f0000004c00)=""/110, 0x6e}], 0x7, &(0x7f0000004d00)=""/42, 0x2a}, 0x1}], 0x7, 0x2000, &(0x7f0000004f40)={r0, r1+10000000}) socket(0x29, 0x800, 0xbdd7) [ 200.413049][T10498] IPVS: ftp: loaded support on port[0] = 21 04:48:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 200.456936][T10493] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:23 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x8000}, 0x1c) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r3, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0x1}], 0x3, 0x8040000, 0x401) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r7 = accept$alg(r6, 0x0, 0x0) sendmsg$alg(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r7, 0x0, r5, 0x0, 0x400fffe, 0x0) write(r7, &(0x7f0000000180)="1c0000002200", 0x6) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) [ 200.528552][T10501] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:23 executing program 4: write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x7cd7, 0x2, 0x2}, &(0x7f0000000040)=0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x6009000000000000) accept4$unix(r2, 0x0, &(0x7f00000000c0), 0x800) sendfile(r1, r0, 0x0, 0x10001) 04:48:23 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000800)="23000000660007031dfffd946fa2830020200a00ffffffffa61d85680c1ba3a20400ff7e280000005e00ffffba16a0aa1c00000004008653b138a32052b44e099d881df6233b6c87c16e6397", 0x4c}], 0x1}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r3, 0x0, r4, 0x0, 0x19404, 0x6009000000000000) getsockopt$inet_dccp_buf(r3, 0x21, 0xe, &(0x7f00000001c0)=""/169, &(0x7f0000000280)=0xa9) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r1, &(0x7f0000000080)="f30ddced9db35e1a3c243a6bd31545f1f4f016cfdd210901b784c8174d18e917ff3e158044ff09b0c7ad1cefd24be327587443dcc9fb5d634b0d847ac32d72ea67b8b04b63db17bfd074d24d47d16b8d93d70decb2", &(0x7f0000000100)=""/126, 0x4}, 0x20) [ 200.721053][T10466] IPVS: ftp: loaded support on port[0] = 21 [ 200.981231][T10498] IPVS: ftp: loaded support on port[0] = 21 04:48:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:24 executing program 4: socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair(0x28, 0x2, 0xa37e, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "86fffcb49f"}]}, 0x20}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x5, 0x0) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x2, 0x7, 0xeb28}) r3 = socket(0x1, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf3ab4, 0x8}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_TTL={0x5, 0x4, 0xff}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x68}}, 0x0) sendto$inet6(r0, &(0x7f0000000200)="5b2e411a367fcdc2c8ca742452790902f8c6131564b4755692d2425e90949a61ffe4bf7fc8c0e985ce0d046a5fdbb238a60baf2289ccedda4ecd1753dd7c0a3f59cfe102ff63b6e197", 0x49, 0x4008000, &(0x7f00000000c0)={0xa, 0x4e21, 0xa940, @private2, 0x60000000}, 0x1c) 04:48:24 executing program 5: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0xcd4, 0x8001, 0x0, 0x1, 0x3, 0x6, 0xa62b, 0x10001, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000200)={r6, 0x5, 0x1, 0x571f, 0x7, 0x972d}, &(0x7f0000000240)=0x14) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x0, 0x1f, 0x1f, 0xfff, 0x8, @mcast2, @local, 0x8, 0x700, 0x1f, 0x6}}) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_delroute={0x54, 0x19, 0x200, 0x70bd28, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x4, 0xfd, 0x1, 0xfd, 0x7}, [@RTA_IIF={0x8, 0x3, r7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) 04:48:24 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x139d42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xa732}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000200)={'veth0_to_bond\x00', {0x7, 0x1, @empty}}) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000140)) close(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r0, 0x0, 0xec0, 0x6009000000000000) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x3, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0)=0x4, 0x4) close(r0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x208e24b) socket(0x840000000028, 0x0, 0x2000000) [ 201.849194][T10591] IPVS: ftp: loaded support on port[0] = 21 04:48:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 201.966013][ T28] audit: type=1804 audit(1600490904.607:59): pid=10597 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir565491170/syzkaller.TF5i4o/41/memory.events" dev="sda1" ino=16084 res=1 errno=0 [ 202.158991][ T28] audit: type=1800 audit(1600490904.607:60): pid=10597 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16084 res=0 errno=0 [ 202.391597][ T28] audit: type=1804 audit(1600490904.637:61): pid=10597 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir565491170/syzkaller.TF5i4o/41/memory.events" dev="sda1" ino=16084 res=1 errno=0 [ 202.510647][ T28] audit: type=1800 audit(1600490905.117:62): pid=10597 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16084 res=0 errno=0 [ 202.582116][ T28] audit: type=1804 audit(1600490905.117:63): pid=10597 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir565491170/syzkaller.TF5i4o/41/memory.events" dev="sda1" ino=16084 res=1 errno=0 [ 202.800920][T10591] IPVS: ftp: loaded support on port[0] = 21 04:48:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip_vti0\x00'}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 04:48:27 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000000c0)=0x8, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="d8120000", @ANYRES16=0x0, @ANYBLOB="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"], 0x12d8}, 0x1, 0x0, 0x0, 0x20001000}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000009e3b1bac1ed219a1626f6e6400000000049ea91cf7eca71036458fd463ae10535e18e64aff76eeff778b3318520fa67f7e891893772559de1ae24b554c15d0aa3f5de0be82c82dc78c183d1cc9abec7b5310c2cad46c61905fe9ef8f5b4079aa4538286766b9dee2f9bb808bbbb1e8fa0343ec4ef8cc23ed027ecde27e70567ae7023725ed712462ee35b010ad2d91a31a73b341f56982db72ee544970ce68b9b68a6341ad4ebb214b843b8486989723a39b761f00fc"], 0x34}}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) 04:48:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:27 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bic\x00', 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x2, 0x3, 0x270, 0x0, 0x0, 0x0, 0x1d8, 0x0, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@common=@unspec=@addrtype1={{0x28, 'addrtype\x00'}, {0x0, 0x0, 0x8}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2d0) 04:48:27 executing program 5: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0xcd4, 0x8001, 0x0, 0x1, 0x3, 0x6, 0xa62b, 0x10001, 0x0}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000200)={r6, 0x5, 0x1, 0x571f, 0x7, 0x972d}, &(0x7f0000000240)=0x14) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)) sendfile(r2, r1, &(0x7f0000000040), 0x100000001) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x0, 0x1f, 0x1f, 0xfff, 0x8, @mcast2, @local, 0x8, 0x700, 0x1f, 0x6}}) sendmsg$nl_route(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_delroute={0x54, 0x19, 0x200, 0x70bd28, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x4, 0xfd, 0x1, 0xfd, 0x7}, [@RTA_IIF={0x8, 0x3, r7}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_GATEWAY={0x14, 0x5, @mcast2}, @RTA_GATEWAY={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) 04:48:27 executing program 3: unshare(0x8050d80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$fou(0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'nat\x00', 0x0, [0x0, 0x2]}, &(0x7f00000000c0)=0x54) r1 = socket$inet6(0xa, 0x803, 0x2) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = accept(0xffffffffffffffff, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000480)=0x80) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000042c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r4], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="020025bd7000fcdbdf25010000000c0001006e732f750700720006000b000b00000006"], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4000006) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000028bd7000fedbdf250100000006000b000300000008000c00010000000800bdb4820b8a9aa73a45d3f10bb0558c0800e000000208e406000000000008000800e00200021440000020010000000000000000000100000002"], 0x50}}, 0x20004001) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r4, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, 'nat\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\\\x00'}]}, 0x48}}, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) getsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 204.506690][T10670] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.507295][T10668] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 204.539632][ T28] audit: type=1804 audit(1600490907.187:64): pid=10671 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir565491170/syzkaller.TF5i4o/42/memory.events" dev="sda1" ino=16098 res=1 errno=0 04:48:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 204.599935][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.616456][T10676] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 204.663426][ T28] audit: type=1800 audit(1600490907.217:65): pid=10671 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16098 res=0 errno=0 04:48:27 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x280000000000002, &(0x7f0000000100)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='vegas\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000001040)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000005640)="7a13fd9b7703cdde13627b3c9ed47b49381dcdb9147747c5d1daa88df01086dc6efedaa68f797bc1537977b723b18fda69f000555b0e0bcb8a7f34522e3b48", 0x3f}, {&(0x7f0000000280)="1aabee49d2eb6978cc0e938df45ca09da534d8818739156bceaaf607abc453f0007087b76733e56c81060bdc4fccaac4f798c7e3a0425489c021718dcb19c2e5e0757b82c6b500e392ec091384ebd8010916673f7b7be32cf7b2d5ab66ef05fd2225c6ef1f278c3b9a7bba1fa56cdf4b8cf5796a9aada04f34fe2312f84be5fec6cd81b15de161c39a4e3007f38d1f0ee49d71035c2ab89d642d8b504be424e9601e8f7e9e53eaa709160f4b34976640794450cdce8aa82c70b53ec30e1ae18065b6f814e80befb7d2e858127ac853e8adb812f9372d6595dd43", 0xda}, {&(0x7f0000000700)="39570b51ab522bf5e148097caf9d86df0bc95abce83912b63845ce5d4cd971120b378dd4db1577855c898b36726bf7ea12118bac68e60845b7c15b35af7ea0784a3f87dc34e72a94adcaf358ca4e8a2a8ae495f62bc7e42f79680f63fc224ff1a89cb8ab8865e166dbcaf5fff791b4fce5e7960cb8b5b518c9b748e66e331b13e72c53b707b468be719ca42a102e43b20de4296be031ef522560926762a57e5c3ce1f21cc603a8c447f45e1fa346d6c634e3cf3734", 0xb5}], 0x3}}], 0x1, 0x0) 04:48:27 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02000020000535d25a80648c63940d3524fc60100099400a000200051a82c137153e670502038010000000d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f00000000c0)) [ 204.814337][ T28] audit: type=1804 audit(1600490907.227:66): pid=10671 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir565491170/syzkaller.TF5i4o/42/memory.events" dev="sda1" ino=16098 res=1 errno=0 04:48:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 205.038640][T10690] netlink: 'syz-executor.0': attribute type 153 has an invalid length. [ 205.094810][T10690] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 205.149788][T10690] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10, 0x180800) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x59, "67cea1927f53e07c51e0ba0a5bf4038d1e7f225c2ef360be05002dca9ec54d5563af7cd93de5cd0843cb7500892f0ccfcad6cdd9c90af66ffe9c10d0b5b1ab1d0caf68785aa41bb3d6b5b354ecd9c7391368d29503250c55b6"}, &(0x7f0000000240)=0x61) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2, 0x1, 0x2}}, 0x2e) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0}, 0x4}], 0x400000000000085, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000000100)=0x80) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000500)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6, 0x0, 0x1, 0x0, 0x1, 0x3}, 0x20) 04:48:27 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000000)={'macvtap0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000000a7383cfb0000000000000000000000000000000000000000000000002000000000ca337b5eb11bf117ac2484c6337084614a5cc1ba3fa45c4556708d8a7e28"]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0xba37b000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) [ 205.435138][ T28] audit: type=1800 audit(1600490908.077:67): pid=10674 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=16104 res=0 errno=0 [ 205.509477][T10704] IPVS: ftp: loaded support on port[0] = 21 04:48:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip_vti0\x00'}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) 04:48:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:28 executing program 4: socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000001c0)={{r1}, "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"}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000003b80)={r0, 0x3ff, 0x5, 0x2d976d28}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000003c40)={0x0, 0x64, &(0x7f0000003bc0)=[@in6={0xa, 0x4e23, 0x3, @mcast1, 0x28ff}, @in6={0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, [], 0x1}, 0x5}, @in6={0xa, 0x4e24, 0x3f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, @in={0x2, 0x4e23, @rand_addr=0x64010102}]}, &(0x7f0000003c80)=0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="4500000034000535a4abd32b80180025042482c137153e37100001800125d1243b0800b3e9d3dfd08300000000000000", 0x30}, {&(0x7f0000000140)="6a2a261b87ba2795329b2c37ecb59c40192b1698d8f30f48630dbbd3c72d1388d6877ef0b501844c0f2afd37c15cf6", 0x15}], 0x1}, 0x40800) 04:48:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000005c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r1, 0x84, 0x3, &(0x7f00000000c0)=""/4082, &(0x7f0000000040)=0xff2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0xb) [ 206.425245][T10704] IPVS: ftp: loaded support on port[0] = 21 04:48:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xff19, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000706010341d43a83587cff000100e9000500010047"], 0x1}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x6009000000000000) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20048811}, 0x8000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r1, 0x0, 0x100000002) 04:48:29 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8000) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000280}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c031}, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0xee6797edc8619286) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 207.075181][ T28] audit: type=1804 audit(1600490909.717:68): pid=10783 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir770150192/syzkaller.xs0cEa/46/cgroup.controllers" dev="sda1" ino=16101 res=1 errno=0 [ 207.113508][T10786] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip_vti0\x00'}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 207.204187][T10786] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:30 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8000) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000280}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c031}, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0xee6797edc8619286) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 207.464789][T10797] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:30 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8000) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000280}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c031}, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0xee6797edc8619286) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:30 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$qrtr(0x2a, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r1, 0x0, 0x8000000000005) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) sendfile(r0, r3, 0x0, 0x100000000000c2) 04:48:30 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xc031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f2, &(0x7f0000000000)={'macvtap0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000000a7383cfb0000000000000000000000000000000000000000000000002000000000ca337b5eb11bf117ac2484c6337084614a5cc1ba3fa45c4556708d8a7e28"]}) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', @ifru_flags}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0xba37b000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) [ 207.841727][T10811] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.905912][T10813] IPVS: ftp: loaded support on port[0] = 21 04:48:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:30 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8000) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000280}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c031}, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0xee6797edc8619286) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 208.383255][T10844] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:31 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8000) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000280}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c031}, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0xee6797edc8619286) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x800000000000c) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x111) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip_vti0\x00'}) close(r2) ioctl$TUNGETSNDBUF(r2, 0x800454d3, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x8308}) pwrite64(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) [ 208.713115][T10851] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:31 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8000) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000280}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c031}, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0xee6797edc8619286) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:31 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$qrtr(0x2a, 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r1, 0x0, 0x8000000000005) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) sendfile(r0, r3, 0x0, 0x100000000000c2) 04:48:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 208.995844][T10859] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:31 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8000) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000280}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c031}, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0xee6797edc8619286) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:32 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8000) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000280}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c031}, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0xee6797edc8619286) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8000) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000280}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c031}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:32 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x1}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19404, 0x6009000000000000) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x50, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1ff}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x50}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) [ 210.017929][T10886] __nla_validate_parse: 1 callbacks suppressed [ 210.017940][T10886] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.110500][T10891] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 04:48:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 210.156023][T10893] IPVS: ftp: loaded support on port[0] = 21 04:48:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8000) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x80) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:33 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) socket$inet6(0xa, 0x803, 0x2) close(0xffffffffffffffff) r5 = socket(0x1000000010, 0x80002, 0x0) r6 = accept4(r5, &(0x7f0000000180)=@ax25={{0x3, @rose}, [@bcast, @null, @netrom, @netrom, @remote, @netrom, @remote, @netrom]}, &(0x7f0000000200)=0x80, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r6, 0x8008f512, &(0x7f0000000280)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000400)={{&(0x7f0000000340)=""/95, 0x5f}, &(0x7f00000003c0)}, 0x20) splice(r0, 0x0, r2, 0x0, 0x8002, 0x0) 04:48:33 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x6009000000000000) r2 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) r3 = gettid() write$cgroup_pid(r2, &(0x7f0000000080)=r3, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x401, 0xf56, 0x0, {0x7, 0x3}}, 0x14}}, 0x1) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f00000000c0)={{0x0, 0x0, @reserved="6e0909ac09df7a138bec4ad6d709bc766cdd6b51e4deed2a4e7ec413191e7135"}}) [ 210.430564][T10917] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:33 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r1, 0x400, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8000) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x80018000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000005400000429bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="01020200e00000010000000000000000000000000000000020000100", @ANYRES32=r1, @ANYBLOB="000102000a01010000000000000000000000000700000000"], 0x58}}, 0x0) 04:48:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 210.775984][T10938] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:33 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000900)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050a000000000000000020000000", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00th\x00'/20], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000024001d0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000f1ff848e7f34ca772de40100626c41636b686f6c65000000"], 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x1, @remote, 0x3}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e20, 0x8000, @local, 0x8}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e20, @rand_addr=0x1}, @in6={0xa, 0x4e24, 0x8, @empty, 0xfffffc01}, @in={0x2, 0x4e22, @empty}], 0x94) r6 = socket(0x3, 0x6, 0x0) ioctl$SIOCAX25ADDFWD(r6, 0x89ea, &(0x7f0000000740)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f0b000000fdffa6fffff7", @ANYRES32=r7, @ANYBLOB="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"], 0x8d0}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@getqdisc={0x38, 0x26, 0x400, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, r7, {0xffff, 0x8}, {0xb, 0xd}, {0x1, 0x4}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x0) [ 211.060386][T10951] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.075243][T10893] IPVS: ftp: loaded support on port[0] = 21 [ 211.126527][T10954] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. 04:48:33 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 211.218493][T10956] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.252466][T10954] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.310394][T10956] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. 04:48:34 executing program 0: unshare(0x640d0680) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e35, 0x0, @ipv4={[], [], @rand_addr=0x7fffffff}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000480)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000500050000000000050006000000000008000300fa23ceea4ab483fce1ba9278cf6fe100000000"], 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ec20a0ccfad8505f20f61f92aec08cf800ec2cbd7005fedbdf2504000052296dd300ffffffffffffff0400060009000000bb59c7f3eb30c1ad86a78980aab5ab7578df44956d64097bb8cb0af5c6d039a43c357fffcbf89b4949b99be0f6a62677c28ac0c69aa0f13a503eca728d11c02f9733cb66a51ffaab43e63f7a02fcedbf6ea0c7a272e9c774cf9376f03812c48a9318428ac9b0964d6240dd1411ca34ef319a464d91a56bfe6c7e3ffac311e09e657a88a62af927efdf20b7b8bc2b7c7e344535d4ce5e8d9d18208f6a361074642e8ecb20c05f09e449970f7565077b83a9300c8e83bc0000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 04:48:34 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x1, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x10) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:34 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x80) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000008980)={r1}, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000089c0), 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r1, 0x0, 0x100000001) syz_genetlink_get_family_id$mptcp(0x0) socket$inet(0x2, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x7, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) 04:48:34 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="2400000052001f000307f4f9002304000a04f51104000100020100020800038005000000", 0x24) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000018c0)={{0x2, 0x4e24, @broadcast}, {0x306, @remote}, 0x10, {0x2, 0x4e22, @multicast1}, 'geneve0\x00'}) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000002340)="88122bee8b917d7ff16334a46d8488b1cac8173c0e0eba338d6bc2064546b54f234e160f862eb7bbc20ffb5bcb78cd1bf9d501182c288f3e5b2bf136eb7854a4a5051022caab24b59f5495b3d62b5abbc683fba25ea2a73520309f9a9fd1bf2fdcb042380efcd1924dcd377b16bd1b1c563ac1983c8388cb4fb7b55ca8c81cd9b4d660c40fe5105b72a8a8af3c10f61c3014ed9a9bcb91326a092229327b2ba84ea157b2cb2bb1426fb36799ab2dc520c911ba457f959e191ccce6e53eba7e500b6089bebfb2872a3272f152aec9ea82bc144f7397677284aad5fa60947d0474f7b1c3f56b8d0435cf043e3f85bb65bef841d3cc85fb22975aba37406e6e0ae31c2c1afda312c6668f03428d39fba4083c6d21bd7948dd83176323c75049e23c01b23c4b08351fa0fa476ed924ebaae3510036269293c3aa5e2b07933fd400c548fdc1e8fd8d2cee14c9ceafc594b73020eb44ac969afe5a0a423e5eb002812e040f4cefc7ad8bfe9b216939bc1269bb69aa6689b46eb2299bd9f0b3f2cf0466e801aea429306fe869913d18fb3ffa2165f910fed18f091970a5e388883c56e8b87e16a14d5068ffc2dcae198347cc1ccdea0a887577c4d5e1ac6083988967e2b16bda9476567de831615cc00476cb3aa04b250f04e3c71d6599000e5d993fd1f57206d184c10290ae2bb940b1fba876c531174e8dc37a8bde28c45807cd8c8138d03193e4fdbd0d3ad1a0f3adea4309b15a6952c862544e3a3cdc7060d23ed06e36d2ee49f73283c3796966067b0c28e9cf864264194df3e397e4a1e97005eeb1627291d545312be1359d06c4f99888d862ec4d7a7a0d1d52496d3b334e4582f8372852bb50cd8cc6cc4884a46551a47c1b1fd2234df54d3a9ce61a390edb77fb087e8cb86c297438f739b99735bb2cc0ebfe3ce919dbccb86ecb145ad729914fe39f26761bdaaaf544a86d05d4bab3e3f71c6cb3217543f586892f61764dea4377a9cc0f221884470a12a219277740b3a6bd1d72031618ff22cca0e7bd048920508011010f34f4153f3ac60e493c1e54b670e5e30ca16c99d154ecbbdca3f6181de4e37a3e05e93f45bd6f85cdd35693f315b0298317dada20b7deae2b3b4e693b1829044f8d87c02c8f8a394a55fbe5beaa6955bc7cdd58bed9fdf30aef04d9adc5f2cf684e1df821d76a5d4f2ffd30842ef78cf8dd8be618750b75cfddb5b5f25f905f40e19c2194d6a737d85682ef1af4a19b98d4e4efe99398cd86a25356b866270743eeef94a8760a05e3f22d78322e111f7c1687a0402a758f2c8533fbfdd21768f8a78395e20a9cbd487f038b6a22b274a9504eea03d685bc3411fc2cb8a3e922cff421ab999b336054fee0533299d7873770a6eb93cd1947451a8ebfcb162c4688e78b6ede00b8438441b57921ffe1c3fd2eb0e0a996d278753d6eeffb845af20515b74847ead73487f870e023a5595b3f14e7959fc856f9edb084c16d888c06a66c493b36e1bb557966dc9a8f4a1d0dcc6cf220c03aed24791b4b6dec902f2b584d2a0812fe8bf89b81b535f1fc52b549f42c45bc79de1cead067ce611813f54906175d860b22f6b8d88f0f1f4527f3b48f1bd9fd04377a76a9c5b9c1093e99cd1b8a5e58609a13daaf8c22ddfaca405436d187784a5f7b0ad2a48feac3045751a8f7bc3d47ee6f28b55e95e84a4c917516f9cc021d3deb03ca783ab3bddd024235161b333008eb0ed98e184b8bc637181d2ebd91b3ccfae9d2bf5243b0aca93d214ef9da32435678d9a6e3e5b554fbe6450791082624682b95fbaad608a69cb6b5644ab57092aa221070c850788f4519bf95d51aab30c580033b2aa06551b701bd1609099faacdf6c583a08b28730c30f83a6adba6fa77ddaac43e324c0732016afd5942dae9012e7a8e2c451fc4e6fc5cfeba689c929ad219d47691bb333471032cffabf041645ae31141960c23e0371465b94e320742ca27484a77803b504769883e81cf718e84632b5efb15aa7455375653a403df8839e7cfca338e722ef25ee3a7afaa080328bee24ffd34dc8e0f3249bcbe4ddd6b50f479aa8d7312388ea3a955164185ba932f545876d7272400afccfe8f8d612f477e7393092508b1d7339cb9b83469452c18e3dfcf59384ce96896dd255f653f544af00fdc8c38e9def0e2c5d98829afd34e477053275791481a3a207fc76dbf63c6fa939845993adeb4f2f52a198c84f81adac361110c3d4aced65e4f242d6a980df1ca2973b4e2eb30b17eee1d5b7499dc8b883c61fce8dc973c75cf8049d8fdb3d480315bd70d2ee7343242600d73bd77732fb5a6a3c9d33a5925ec5b7403d1e27018e803555f1718cfbb33b40ea2d114455616e4735c118257acb89d1adf7b149356b74840b28654c34eef26b8157a363a850cdbe7c0f1ae2e7ce1b24c974b1328bab8eb6c3d00918011d76441d1d899034b39151b54407596dcec8a951c6c5e1c8fec3693da24cbbf063e7b9c6dee26916e857c6049dfd93e19840d4248b3e840f68f2a219317c48bd8f82fef1c3a307751f58a30570506dbbdfb289f968185f28604ebfc2ecdc8a4006462902c4ab2883d72c54e8f8aa1948d6363ee8d31acb57357cb92893431f6147656b76c1d730dba495e98c8b190927aa5433ff0d77f7d6e9a27f3c2baa41286870994876190e3feb39d40e2f2e5612a6ce96d7c24f9c0a0f0cc86ea4363c497296bc85483fb405c1086575283aa612e2ceb4c955378a21e1774c70edb9987a29e49590940d8767b2f3c0f840f2beb82c08a2f4eadcb41475c2cbb176be9f0d2e46cbb758368e4bde4834e7bd5a2727dd8a614d3e093ed9a6cd656bfd15cf33d4e8aa2a7fb6903d006c4bdd2b3eee3b8c7536cdc0c7b425a6fe9ee0dc842c1cd8e01b6123f196f0d066027d4ed1552e3460eefa14923f5982b14a79551440f4e5e9393b7e9a221d9ad3e229178b2b390889d037e829656b4664b8a674b42699b3b418e39963b77ab5aa3b1f576ee10f6d2cff0334fcc64b7664d8b0ab89b42cec159d55004da89e77447cdd76162b952208d32e301146992fb7fa5beb8e7696af71ea751bc0326a244a7735d489287f201c278ba1eac6ef43efbb709d071c8bda2c5c8d71d8fda9f06f30c0483aa1ad07a9c02a27e6371e4102f66153c584464d5b54f2b8d6b6b3a1cfc9c1d370857801faabb5929f67760f67e59ad6b89fa0d1dc99f35fd523f9e1fbb24f24685cd0afad5b2b144838c198021a3159ccd428aa66220a3fd125a562b0d5ac3d2a4f24288ead91dbb471c7c7b1462ab2fd0d1a40b0ea740848461a782b91c04158dda3001a50f348f5e2a9e6b7051f1cd1495df4b316ad74d44916c1e7f0fce41936b31ab74c6b3c8a1e5d408fb7cc9cef1fa6e47c4d5beeabc5149b9d78140433223ea019ab763c65a3ac0f0fd90ba0ed72a7cbf14adc9ddeac6112ff3eadd7de04dd6146f3010e0eba2403c0ed9250298440168919d29dd8f66ee79c374834e44ab5a4f39ae73d852a334eef6690c443c640979538233d43e5520e19495c4b2866c77a4b7146acf89971aaa7901ef6dcf9d0ad227cec87cc1744e1fc89836836b6b3f0fd2cc158fd4bd8c3447f32b995677d2df0e732ee080931128ac0d25d527fc91090000000029ce71c214fd2ca73f5f68c6f1cf96023e9597511e86e084d5e4a4849ffb41ad5bdb2079deac5a53a02f812b6aa8df3a541cfd525a540ab9218072ecc773c44637329e356140dc5c434a7e71c5e3d4b929c8b9c11e4e600fdde09cb7aaaa6deaff63e79afee6cf9ed7c6dad3a3bb9011057ccb38a2b02143abdba9fe566b622f28742e5d715c8519bf6e876c4fe6dc6b849d98b72a1fcff8d188775134f5558f2a1b7070af064345a71afc5e2ac295e81f1f7b9551afbc2dd26f470b8dbd152e54e314d9c8fdffbcd12ebd33a7deb7ae77fdf4633d01f4f02f328d5a8b96c30677787e1e909055d94834435d9eac6c1b82e0c110df61c3a63553a55c5242c1b73ea5d8c87938061a53299f0f9be487772f90e3ae1a5962025c8e8af6315d09b3fedab2ce5a7506ff2e913ece7b175b382bb4888c03d8ba771c3f657fde1cec63c66d9c1ff56ff0d7fbab27d40c6b70d6a18d5eac8f2413804f86d3684ae29e1bd5a543cd23c97d30e181ecab5feb2ef24ba7e6a1b702fc5c7907c780e2d74bef3ba3e83c8a947e35d88b27db682eb8a6c19593ae6d3f9e1985f11afc3303ae7d5058a69334f3eec0f2400f2c26f3e011e174d4482855497669921c96168e89f022df0f78260bbd93584f2e5cb9569afff5651208c4a67be00aa7422c63b8bea251b839023c63048c3531b0e9c6a873536d66f2429314de9a84a3837c0b1284bebfb7cfb779eca6000b3fccf9df8516ff0d5e866c5d3eea8caecacd572405b4110f4a3b5db00ac732a06761b1c4fad9ca284cfa7a6791f9726b6ea0109b90a630f6b8e9d07f2f7211eeef1f73f20cfc6df7d795482c1a4517d48ce39a77736b9aa4135072aabccb52e0b84cc437e1e4ddb06df66253044d531586068ca6a19889cd6b20c54e12569d8cfb333228c2129f0b38f54290944d9fb64a77ef4f2d74f0d860caf4ee499ce1640362dfe007bcd7450919c4e19403cba18ff8bad794dddf75c90ed32ef8f4203c4465c052a79f8e6ced18b229474e696f024e85c71b86c37424c384644abf3a4f911392133f234340e96f63220c5bd615ad83e5de1c389e6edd0d0748d65986b58002ae3ea1faa3de3a4c20673519796f524a5ab6f5b46ae222384e695cfabcbb44fe7535dbb42b0f03ae785ea4fbf77af890e04787015143a66a8b0bbd6a42a6aecb3fbc07ac2911b8c8c93243d6a765944c71b6b3c33b12cf9f0e8032359841749c0300ffeb9b2b88c16acc0dbe28e16aae7e224194e2b8633c50d75a047be4535482a402dac43e55f8249e088972dcf27a114e1526d80ca857eab2816c484bde1f835ac003167e360c591902caec68376cacc17f22927c89d63d8d5ec5e44d8e3a57a5068629865b6ac6d62b546e2804c448989d96da315429a246a77d27f496deb7b380c1475808d230c40263452c698e4796c1bd739be67da35610cc4e1624daaad9be2d1a134325365d924dc218d117183cc8911c83eeb3722c24c972c89eaf03b151f4a9d0f52afcf4e53c0463fe71622df47e05e34806eadb633130292ae15789bbda6eb735e8fea0e958efe52a2bd75140c66ce0e07041b5d844e1e6318d2bf7ccb3d199983bfd4d6bbfbc630fcbc1843211fae666e57274933f5f8f421c7278fc0cbc2fb2dda4e1d0cc6fe98463f0124a32d17c27267853101a7862fc666d1e4b831db0a2f08305f79840d52e7897f7c65ba829cea9b715e555aba4b4fca48ea65cd30073eb2a41dbb1da6a541ae1f93e905395a721b8d82cc8e1695b36ed0baa3da2132797ba36934734726b852de428719aa722fcc17961e4c7488e486e4f5399027db5ab5e385adc6edd0edeb13eb69ea2e32116542e52b289077e9169bfdb56fe0a9ba1ddb97b8e38751724771f371469ce937a8f46b4208b96779184a25138beef53ab28f6363946deac10c073c25a484bc53d31d4f9700d70e7d969784be4a5a62d01d777cf52b434308c4320ab3796f3d1e7a55947287a016284019c385e20fe6c784416708bb957202364fa794d4f63993ee9614c12731eb5c420f7bf74438944f058bb29b77f0dae6d1c21e28696ec50b071b63b90dab571000000000000000000000000000000357142b9000000000000000000000000000000006a64e79e349c32c88fdff1a18f69383fe0563d19add65cf3", 0x1023, 0x20000041, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000340)=0x10) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)={r1}) bind$pptp(r2, &(0x7f0000000240)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) 04:48:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000001c0)={0x0, 0x7e, 0x0, [0x0, 0x1, 0x6, 0x4, 0x86c], [0x1a4, 0x7ff, 0xfffffffffffffffc, 0x100000000, 0x2, 0xffffffffffffbc60, 0x20, 0xfa43, 0x4, 0x5, 0x9, 0xcf77, 0x7, 0x81d, 0xffc0000000000000, 0x8, 0xfffffffffffffff9, 0x5, 0x8, 0x3, 0x3e6, 0x8, 0xffffffffffffffff, 0x0, 0x7, 0x4, 0x4, 0x1, 0xfffffffffffffffa, 0x2, 0x4, 0x1000, 0x9, 0x401, 0x0, 0x1, 0x3, 0x5, 0x100000000, 0xfffffffffffffffe, 0x2, 0x7fff, 0x4ab, 0x9, 0x7f, 0xf9a, 0x800000000000000, 0xf12, 0x7, 0x2, 0x7fff, 0x4, 0x1, 0x20, 0x2, 0x9, 0x3, 0x8, 0xfff, 0x100000001, 0x8, 0x3, 0x1000, 0x53e, 0x9, 0xdc45, 0x3, 0x81, 0x6, 0x0, 0x6, 0x5, 0x5, 0xffff, 0x8001, 0x4, 0x80, 0x1, 0x3ff, 0x1ff, 0x0, 0x4, 0x6, 0x4, 0xff, 0x4, 0x4, 0x2, 0x6, 0x93, 0x6, 0xfffffffffffffe00, 0x7, 0x7, 0x43bd, 0x10001, 0x3, 0x2, 0x100000001, 0x7, 0x1, 0x3, 0x7f, 0x2, 0x48b, 0xc5e2, 0xc8, 0x3, 0x80000001, 0x2, 0xfffffffffffffffa, 0xd84b, 0x5, 0x0, 0xfff, 0x9f09, 0x8, 0x1, 0x4, 0x0, 0x96b]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000600)={r1, 0x2, 0x3}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r4}, 0x8) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r0) sendfile(r4, r3, 0x0, 0x100000001) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f0000000140)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r7, 0x0, 0x103ffffff) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') [ 212.184205][T10994] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.271101][T11001] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:48:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:35 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001700)}}], 0x1, 0x2400c080) [ 212.310375][ T28] audit: type=1804 audit(1600490914.957:69): pid=10992 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir565491170/syzkaller.TF5i4o/44/cgroup.controllers" dev="sda1" ino=16137 res=1 errno=0 04:48:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:35 executing program 4: ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x6, &(0x7f0000000240), &(0x7f00000002c0)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4001, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}, 0x1c) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x34, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010101}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x24004800) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz0'}, 0x200001c4) [ 212.494436][ T28] audit: type=1804 audit(1600490914.997:70): pid=11004 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir049987834/syzkaller.1tU8XN/48/memory.events" dev="sda1" ino=16141 res=1 errno=0 04:48:35 executing program 0: unshare(0x6c060000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00\x00\x00\x00\x00', 0x8) r1 = accept(r0, 0x0, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0xfffffd33}}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x231, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000580)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/107, 0x6b}, {0x0}, {&(0x7f0000000540)=""/29, 0x1d}, {&(0x7f00000006c0)=""/230, 0xe6}, {&(0x7f00000007c0)=""/85, 0x55}, {&(0x7f0000000840)=""/71, 0x47}], 0x6}, 0x1) sendmsg$qrtr(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, 0x0}, 0x38) [ 212.684143][ T28] audit: type=1800 audit(1600490914.997:71): pid=11004 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16141 res=0 errno=0 04:48:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0x22ea) 04:48:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 212.854931][ T28] audit: type=1804 audit(1600490915.017:72): pid=11002 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir049987834/syzkaller.1tU8XN/48/memory.events" dev="sda1" ino=16141 res=1 errno=0 04:48:35 executing program 5: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/753], 0xa) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) writev(r1, &(0x7f0000000600), 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) [ 212.916607][T11023] IPVS: ftp: loaded support on port[0] = 21 [ 212.995426][ T7] tipc: TX() has been purged, node left! [ 213.035813][ T7] tipc: TX() has been purged, node left! [ 213.064993][ T7] tipc: TX() has been purged, node left! 04:48:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 213.089943][ T7] tipc: TX() has been purged, node left! [ 213.108442][ T28] audit: type=1804 audit(1600490915.067:73): pid=11003 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir565491170/syzkaller.TF5i4o/44/memory.events" dev="sda1" ino=16135 res=1 errno=0 [ 213.164918][ T7] tipc: TX() has been purged, node left! [ 213.195044][ T7] tipc: TX() has been purged, node left! [ 213.228264][ T7] tipc: TX() has been purged, node left! [ 213.278855][ T7] tipc: TX() has been purged, node left! [ 213.310833][ T28] audit: type=1800 audit(1600490915.067:74): pid=11003 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=16135 res=0 errno=0 [ 213.346618][ T7] tipc: TX() has been purged, node left! [ 213.361869][ T7] tipc: TX() has been purged, node left! [ 213.392414][ T7] tipc: TX() has been purged, node left! [ 213.430815][ T28] audit: type=1804 audit(1600490915.067:75): pid=11003 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir565491170/syzkaller.TF5i4o/44/cgroup.controllers" dev="sda1" ino=16137 res=1 errno=0 [ 213.501171][ T28] audit: type=1800 audit(1600490915.907:76): pid=11004 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=16141 res=0 errno=0 [ 213.536709][ T28] audit: type=1804 audit(1600490915.907:77): pid=11053 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir049987834/syzkaller.1tU8XN/48/memory.events" dev="sda1" ino=16141 res=1 errno=0 [ 213.569216][ T28] audit: type=1804 audit(1600490916.057:78): pid=10998 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir049987834/syzkaller.1tU8XN/48/cgroup.controllers" dev="sda1" ino=16132 res=1 errno=0 04:48:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8000}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000000c0)={r2, 0xfff, 0x42, "dd777a4b371b0424f39d59330555228704c4f038216e3c12e7b9a58474d995db501e6fd31dfa6056d9ea42e80c2ac848e81bbd463fe2c40d1fb4681f30d4c310230a"}, 0x4a) 04:48:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0x22ea) 04:48:36 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@private0, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x1010, r0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) pwrite64(0xffffffffffffffff, &(0x7f0000000400)="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", 0x200, 0x0) accept$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) 04:48:36 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r4 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000003c0)=r3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x12b000000) 04:48:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x34081, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', {0x7, 0x0, @empty}}) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000280)=""/233, 0xe9}], 0x2, 0x0, 0x0) 04:48:36 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0x22ea) 04:48:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040), 0x22ea) 04:48:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r4 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000003c0)=r3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x12b000000) 04:48:37 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:37 executing program 0: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x4, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0302000000000000140012000c000100626f6e64"], 0x34}}, 0x0) r4 = socket(0x0, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x13804}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x4}}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000140)={'syz_tun\x00', 0x3}) 04:48:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, r1, 0x11, 0x0, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x80}]}, 0x24}}, 0x22cb0e1ba4e0de68) 04:48:37 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@private0, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x1010, r0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) pwrite64(0xffffffffffffffff, &(0x7f0000000400)="4ebefa1e923f1e018b6e53bf4815b78e1f2ef9212b93090c1ff6b35c208d50aef3fd759f995b53dd37c58cf8332b8a6b66575478e02ef0145bf122ba2e2c53a7ec45e375683475a6495f8d7b7a088f5e32dc266569074319bf8c8d3d8007cc92e2ba0d9082c41b63e330f353a3f675a98d2e74a08e38400f7f5eb113a0e25fd90115d57a7acdcab1128cf4f9c719f3f29d460c507f8a2a6594d259217d32eae9be93c6ed17a67ae2e7e689a31fa8449da12fd62bf423cff702b09e6ee1ff0e698b8bb517819eb712ba2b34b54b28b79d9399d920d5a5507e8a85f37060dfe3051f06f8d7cc9b068495ee5d5fcce85410bcd9f91d1f198353ce94b2e03370e43875c1a035bb88fd26fbb5b1252e2056d6b67e2b2f424051a40ad9170e76a81a6ca4f149ff643db76f8f2c1aa8024a6279952027489bbad6479e47ea5ba9e47d8136df398665f6cdfd15e93cfbf2ce1151afe9321ed63fe7100e704b232646fc1e0e936b90cceaaa70225ce71640e10316d2cc637355eddb3c4e16ff1635fa4e65a66eb5ab2cbf9d6f063e05f0e46fcc14bf31eedfb9f33c215fc14946cc6f7493924442e939f71ac4bd3e35e78857f9624c663f3669a47a7146e3249ee3eaaf681f371d515af5b934f9252c7ac2a164bf318fc2b194ee087b2b28ed5e4618c0906fc3f32c43a3b9e08a2e0d509f65a7de909e8c3c535f1d8cb9c236716e5ad709", 0x200, 0x0) accept$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev}, &(0x7f00000001c0)=0x10) sendfile(r4, r3, &(0x7f0000000040), 0x100000001) 04:48:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040), 0x22ea) [ 214.636297][T11104] IPVS: ftp: loaded support on port[0] = 21 04:48:37 executing program 3: socket(0x10, 0x80002, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040), 0x22ea) 04:48:37 executing program 3: socket(0x10, 0x80002, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, 0x0, 0x22ea) 04:48:38 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002000)={'syztnl2\x00', &(0x7f0000000f40)={'sit0\x00', 0x0, 0x0, 0x1, 0x7, 0x7, 0x2, @private0={0xfc, 0x0, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, 0x7, 0x8000, 0x8, 0x37847a6e}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000020c0)={'ip6gre0\x00', &(0x7f0000002040)={'ip6gre0\x00', r1, 0x2f, 0xec, 0x3f, 0x2, 0x14, @mcast2, @mcast1, 0x8, 0x8, 0x5, 0x6}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000002280)={0x400, 0x2, 0x1, @local, 'macsec0\x00'}) r4 = accept(r0, &(0x7f0000000e40), &(0x7f0000000ec0)=0x80) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002100)='NLBL_UNLBL\x00') writev(r0, &(0x7f0000002380)=[{&(0x7f0000002280)}, {&(0x7f00000022c0)}, {&(0x7f0000002300)="246e573d5e42f60eb6a608ff40982cd7de3435e3e73a6d5669f199b5a0853d756d5999c76a089e68b557c80282429423852dfcde8fa2d2b8bb605b9633969d3fdeaae4fdb4f61504b832b2e294c52cd54915d6ad1e9abe32fa246b9df80f6b53d4f5b5d9", 0x64}], 0x3) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000002240)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002200)={&(0x7f0000000b00)={0x94, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x5}, 0x20004801) getpeername(r4, &(0x7f00000023c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f00000022c0)=0x80) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r2}) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000002440)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) write(r5, &(0x7f0000000d40)="bcdd058eeeb63fc7a68ec17f8ea5bfe6fe12917a6743fa95c6948fbee87ea522d3a7b68c0c4487c6403de65b3b219a016f7be97814b1dbcdee3314d27e3689c8914d744d93d741390cf0e75ea7fe551ee40b9de1be7070b82c83e2852b0ceec97a8909124776b6f3599585f92cec1d592cf5396d3b83c8fc161855d117fd30f9933f020b6cc33e88056301e4f5d8dd948b7672de4579601851335235da9e8e4a2c0a3b4c5c5dc3344ced9b8e276a70c9696eb59913c4cb5f63d11e592b02f23df41e8dc7a94ae5a5a0577f948494e5bcac68d91111a73a4c111be42c780b731bb095e1f6f8d914cc949bfdcb1b2d978e1a840c", 0xf3) sendmsg(r3, &(0x7f0000000100)={&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x700, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x11000000}}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000740)="e66fdb0cda49903d45feb3fb5ca6dc312d9539dbd37f1062895219d8f43c785b7cdcec414a54b65ec6be6fbe70d0a7ef7354dbfcd292e7ade946102ab6fd58c86bad6066c9bc4d571b7532f65e4f3472692bac485813c0a1078797c0847ae1d233a8607bb887de51b59d5be0b4acd2cd9a7b6d26c45388f0d0832bc5ac4d4b5f224e90c7a3d2e47d6976d9170f7effca48c63f10adbf1dfc41091751b6406d4317105537393fc66a96c908e5d3c8ac80c83c434a166e4be9b26262", 0x200007fb}, {&(0x7f0000000800)="a5d0ad5c4f5d25e5ce804ee8eff6a9d3751f7d57a8d653a20f66ffbd85ecd5c230ee1d2d4449e08ebc9b59106fbc1ba4e32fe8efb559fe1dabd8051b3e4742240027708700c2f6865f7197357b2f718f9b41b9bc0578a86e78c440e84130828643ad7a782910cee5d19a6e9850e309db6ca7d90abec63f82de2722b9e234040c111454a723d44751122b6af34887150c5dfa35f783127a8ca4dcac8c8338bdd27ad748e7f471c094f4f4cba0cce1ccaed72ca441519d9677a7bd4dd86a514ae6", 0xc0}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f00000008c0)="f1b9348f405606cffc6d8aeb4ac55b507d3373554404e4cfbb051dabebcbd637807d5f982357a1f24bbbc50cd64cb0dd146f3c558c1a906b0d90aa39cae4fdeddb09cdc632fd3a701ce90f93488cbe1bc0394fc7ed4a1f331ecef4ca98850487b2eecf226ca7ec3171981382aa8ab1c8cf4c48846daf2bbb291f11ef68ae505ffb99ed80acbb61cd89b5ea16da75f26d59b00344a35faef92e1524aa2724c1b763645ff5f88d505a6cece68d36346fc260eb524c431c0155d38f5bea7f66595c", 0xc0}, {&(0x7f0000000980)="a890e850f03711b4a130fd2b2cb54c29da5874dbf332f09da8bab18afdcceeffddcf365f95b1f28e53f1642747bbe954f6f4a3b228ed8c1269cbf8c18d977039b9c84e5c30567e2e4d31d10eb4d7f30f1074104fb70a2c", 0x57}, {&(0x7f0000000a00)="15c752f4f64c6d4630a0e658e628cf8ba33be5e43fb67e93203ab48e84a5a3e435e467e16f216b62c0271b6ab86b8890adba51a81bf3adb5a496eeddb3919a55cb89dd22429d178b15e4c0f53499b932f0d99daf96fd06e99731a8", 0x5b}], 0x6, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x218}, 0x1) 04:48:38 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}}], 0x1, 0x0) 04:48:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYRES32=r2], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r4 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000003c0)=r3, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x12b000000) 04:48:38 executing program 3: socket(0x10, 0x80002, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 215.734561][T11104] __nla_validate_parse: 8 callbacks suppressed [ 215.734570][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.799114][T11149] IPVS: ftp: loaded support on port[0] = 21 [ 215.959642][T11104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.044069][T11106] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.136862][T11106] 8021q: adding VLAN 0 to HW filter on device bond1 04:48:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, 0x0, 0x22ea) 04:48:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, 0x0, 0x22ea) 04:48:41 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:41 executing program 5: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800003, 0x8031, 0xffffffffffffffff, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000080)=0x3) 04:48:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) openat$cgroup_ro(r1, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000001900)=[{&(0x7f0000000400)="b19462c33f5d8115ec7c43e324cb91c04ab79a9d9abe98033e3295eebff7f4b93ac52a7368d1be44dc0e346c21e220fa44fde347ffb59892f2c7713ce44d0acec8d57d0ac439e24d4c7e6160356492dc21a4f94e67be791ec34221e762cd0f50ebc08b5a9a3d7b2c10a61673255ee1dd14e0bf57bf9afebd301941e2b3259c1506b98db698f5c9b319958d545d4e4d1db301dee1263e963665de6964774a1a8c82bda902ab3a57a6cb5fec6f469af8ca336c8e52ba6aae6eda763e8e5cca04f77089bb16d1cd0f75f6fe2a4f2f8f875d8be12571eec5a56f", 0xd8}, {&(0x7f00000005c0)="357664a6eb136a8c093aeda6ca78c84b1cc4ac9bb07939d040b691d81fe0f6c040df718502a23459a7c34ddf57b5325b6d8391372a758d24b206927b31fab6942f2c896931cc3c319c3633ad5cfe171a2f68d83077637bb27a168f7117", 0x5d}, {&(0x7f0000000700)="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", 0x58c}], 0x3) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="6cffe6bcb85d0844c74aaf64711d9c86eaa3b7e538da8b87793e7ed372199abd5a701c5bc45e8b705f0dcd598559b2304c2a902018d22862eb4d54549678b56ef9e66d3b6b6f7d813f5366a60574d5c22707a95beb3efc251e4db1081f5b76b1b559e6ba4d86844b3cab68bcc87d7882a3cc50ee8ae2251e6b3efa972d044600f66e71186a87151a1f44565c654bb3c042af5aceffb72efc9fda3b823081b14f6d761fcd950d43301d", 0xa9}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000000240)="cae07ea333820e7a9852fbfbbae9d888b26de6a5203caada7a34ee75fdb00c38c885d262f43c14744a7f142b8d9ba0e6da363b90f02e506c9990e2e95a57b0f05073d60b17a084b58688afd05cf41fb52f30596f89eb40cd55a53e457ad7b358e4f79a9d8b435eb4b6e049a82f5da6d4a7878ccc15740f7c4007a8bc001a6b20b4c249b2903c8db6c0fd8f018ff0b309be91f42dcb7a877982c6b71755c34190a90b7b594137387fa6defc50ad8c86f88fc011e341273163afb5f1f3fe4748e39701446f538ebcfb6f1787a2d6f10b1c5ec1bdef154f49f587d95b2a447087de64af7cb37b35d022cd", 0xe9}, {&(0x7f0000000000)="3ef9ebbfef75a8f90a85c0c35fc52ac0d0298728f5472e6a65fed3dbcadfa80effb172ef2564503508c83b4685c953dfc5de6f0c3769cd8b483dd00ccb9646", 0x3f}], 0x5) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x10012, r4, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xe00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='cgroup.stat\x00', 0x275a, 0x0) 04:48:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000200)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r0, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x8) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x6009000000000000) r4 = openat$cgroup_ro(r1, &(0x7f0000000240)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002d80)={r0, 0x8, 0xfffffffffffffff9, 0x4}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f0000002dc0)={0x7ff, 0x7, 0x100, @local, 'xfrm0\x00'}) setsockopt$inet6_tcp_int(r5, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000100)=0x14) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1e) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) write$cgroup_int(r4, &(0x7f0000000000), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) [ 218.529841][T11279] IPVS: ftp: loaded support on port[0] = 21 04:48:41 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, 0x0, 0x22ea) 04:48:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, 0x0, 0x22ea) 04:48:41 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x4}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xff60, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 04:48:41 executing program 0: syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="f3e8ad2f9105", @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @loopback}, "00006371ae9b1c01"}}}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000086", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x41010) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup(r1, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) sendmsg$AUDIT_USER(r2, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x8c, 0x3ed, 0x200, 0x70bd2d, 0x25dfdbff, "f3457119c1a0894b59c547c447a168b0f0741b6ad76b0cb6ec87f1f4ee2e4cde72cfea674fae4a76339f1390bddcc735f3fcd5cc22c931417ac6b5ba299615e2d90b04a46a5ee49ec2482780c98fe70953a0c04a6ecfcf614709739d2401e890bc9953f76291bece24fe3d9361b12bc6a3104138e0e7aba6e5", [""]}, 0x8c}, 0x1, 0x0, 0x0, 0x402c044}, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) accept4$phonet_pipe(r1, &(0x7f0000001c00), &(0x7f0000001c40)=0x10, 0x0) splice(r1, 0x0, r3, 0x0, 0x19404, 0x6009000000000000) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000001940)={'sit0\x00', &(0x7f00000002c0)={'syztnl0\x00', r4, 0x29, 0xd, 0x96, 0x5, 0x68, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, 0x700, 0x80, 0x566, 0x7}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000001a40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a00)={&(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250c00000008000b000400000008000600", @ANYRES32=r6, @ANYBLOB="0807003100053a6bade014aba64ff900000008001a000900"/40], 0x4c}, 0x1, 0x0, 0x0, 0xfbdb6a8d2c2cc529}, 0x80) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000001cc0)=@req={0x0, &(0x7f0000001980)={'dummy0\x00', @ifru_data=&(0x7f00000019c0)="04cd700b5b084e400f3ca705b8136298bdb703a83c7232f851ef7a87b9de4cb6"}}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000500)={0x0, "d7a6c181af8a260dd9f66ae038e1dcbe"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000001500)={r7, 0x7, 0x0, [0x80, 0x6, 0x8, 0x1f7e1eb5, 0x400000000000], [0x2, 0x5, 0x5, 0x8000, 0xe, 0x401, 0x200, 0x7fff, 0x8000, 0x2ee9, 0x3, 0x0, 0xe10b, 0x7dde, 0x3e38, 0x6, 0x0, 0x1, 0x3, 0xfff, 0x8, 0x9, 0x9, 0xfffffffffffffffe, 0x3f, 0xb287, 0x7fff, 0x9, 0x5c, 0x4, 0xdd0, 0x55, 0x0, 0x0, 0x2, 0x2, 0x5, 0x0, 0x2f, 0x8000, 0x0, 0x2, 0x20, 0x6, 0x1, 0x200, 0x3, 0x3, 0xffffffff, 0x20, 0xffffffffffff7fff, 0x8, 0x7, 0x3, 0x0, 0xd1, 0x8, 0xffffffff, 0x7fffffff, 0x0, 0x6, 0xffffffffffffff02, 0x6a, 0x6, 0x2, 0x2, 0x101, 0x1, 0x4, 0x401, 0x100000001, 0x3, 0x180000000, 0x4, 0x100000001, 0x5b5, 0x1000, 0x376, 0x6, 0x20, 0x2, 0x4, 0x401, 0x1, 0x7f, 0x2, 0x101, 0x6, 0x9, 0x3, 0x100, 0x800, 0x1f, 0x8, 0x1ff, 0x2, 0x9413, 0x3, 0x100000000, 0x100, 0x0, 0x4, 0x4, 0x3f, 0x5, 0x8, 0x2, 0x100, 0x2, 0x5, 0x100, 0x6, 0x1, 0x2, 0x1, 0x6, 0x101, 0xfd1f, 0xfffffffffffffff8, 0x0, 0x8]}) 04:48:41 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x0) 04:48:41 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x8) sendto$inet(r0, &(0x7f0000000080)="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"/276, 0x114, 0x4a40, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000300)="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", 0xfe, 0x0, 0x0, 0xf) sendto$inet6(r1, &(0x7f0000000240)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x10140, &(0x7f0000000440)={0x2, 0x4e21, @loopback}, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x10d, 0x10, &(0x7f0000000280)={0x1}, 0x4a) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x17a) sendto$inet(r2, &(0x7f0000000480)="7ab221f7b82f4a3dc34e21f418fb1bbe9a3beeeec201af8af786f570dac8005b289bc0e3dbd330b5d2916cf27840bb52021fde63d31444ce1f7f95c90b225f2a02999a9d611d5435278b2755b42830f6e4babda6687f9567c9f8d712b90d828fce3813e2665d98fde32e755288ff386e8417828c3ec9ce74b9f7468237949d35bd81fb0ee1739a8a5109fd9e8846ca6a4fc4e42302342adef0ad8e59171c8b51c059c0", 0xa3, 0x0, &(0x7f0000000400)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000540)=0x1, 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000001c0)={'raw\x00', 0x2, [{}, {}]}, 0x48) socket$can_j1939(0x1d, 0x2, 0x7) 04:48:41 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fffffffffffbaaaa08caae00000000005441c64800000032905851a861d0d89f74cd84d383e1eefccdd001"], 0x2a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@empty, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x0, 0xe2b9c5094dab0b45}, {}, {0x100}, 0x0, 0x0, 0x80000000000001, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4d5, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}, 0xa00}], 0x400000000000107, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09020000200004000000018005e301000a00000008000b000000", @ANYRES32=0x0, @ANYBLOB="118b4cf3577d772f57eb24e925a9505ef0e1afbfbf06a65d9518b8f50566cafc382fc0fdebca122ee563c45f2a83a727d8ecd8436ae8ee7014063e723cf9c25129298e298e0dd192302c66be5ad05f78b5d9e23a"], 0x54}}, 0x8040) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x4, 0x4, [0x3, 0x1, 0x521, 0x2]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r5, 0x5}, 0x8) [ 219.190973][T11329] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.253386][T11331] IPVS: ftp: loaded support on port[0] = 21 [ 219.263280][T11333] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.301361][T11336] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.445554][T11331] IPVS: ftp: loaded support on port[0] = 21 [ 219.498211][T11359] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.510905][T11285] IPVS: ftp: loaded support on port[0] = 21 [ 221.877317][ T7] tipc: TX() has been purged, node left! [ 221.893252][ T7] tipc: TX() has been purged, node left! [ 221.912821][ T7] tipc: TX() has been purged, node left! 04:48:45 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @loopback, 0x46}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x6, 0x800, 0x3}, 0xe) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x5, 0x8}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x1, 0x8000, 0x81, 0x100, r5, 0x6, [], 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x40) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f0000000140)={r6, 0x0, 0x0, 0x4}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r4}, 0x10) 04:48:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x0) 04:48:45 executing program 3: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:45 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='memory.swap.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0x800000000000c) socket(0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f00000001c0)='ns/time\x00') ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)=r4) r5 = socket$inet6(0xa, 0x803, 0x2) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000380)={{&(0x7f00000002c0)=""/88, 0x58}, &(0x7f0000000340), 0x2}, 0x20) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000000a40)=[{{&(0x7f00000003c0)=@phonet={0x23, 0x5, 0x9, 0x97}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)="7036956c6d1b2988ef3aec27ffe11342e323d5219a574f6f9fcda7375b0d87f12561bcd94ea10d002c9f46efd1bcfb4f04d7056bc7ef4f4b1dcfeed6814c384d9676f565557702c0200945bf542934b8d875b6ba82d4f83acdb1cef0af77de441e4ee70bdf896a9df6bdf386a407bed2d61f25d6c7e6a5d9252c4aa9cf9f9d6f70e9d16b1e254123b319599d7a76009a2bdcbeb9fd79bbbfa92f87df623cb6c630edf21d991f25658b78e27b92e0ef12217a92774294ca6cc8fb4f757c2e56e5d60cc277", 0xc4}, {&(0x7f00000005c0)="ea850d72ac2f516c73ba83b50e08e47ce16aeaf6d1ffcb5b23f9c5eff9aa933fdda8213bbe1b720260f29718eaf93657ca95abc0ace6ff2bb3d9446c1cecd6ef5522196bf43fb7d9cd03629962c83342b1e395b97ec9d0e047859c0403da2af5048a43ebbdeb93882021303ba28f5aafd96227", 0x73}, {&(0x7f0000000640)="33395140897f01b650a7b6f78e70a922ae978022de0a172c6a8ef0f09b9be60425dd91f3f498a32b23cd7d4cec98f72fb78624d0b29f860309", 0x39}, {&(0x7f0000000680)="c0af737fccca4f3af55ba599a77ea59b64e520175806cefd24ac9d8751adc8944e6142188c998eadfb05bd26849d7262591d3f076853c326ccd5e7eea88adb014e623a5ef6a5e06b724c96676c127cff8214717528d1280a66789b70cd8db55c8e5b04ca48a7e892dfabe453031ad0e607aabbbba4281a124bb210969ffe06d91620c7e4aba3f57164faba84b90fe033623ff4b3596c3dbe7e608f92b3e2bd82264c871da7aafb251bacbdee860fa92b3b5943d357913f60708a5bacffc9", 0xbe}, {&(0x7f0000000740)="7fd2c11911fcbcb910ba650b8fa9c3e87205adbe6344202046c9fdd477deee7f28dafcfc7207b7b84b773356f37e2bdcc29ac71768c1b4c81633fb7b936c4af324f304b6a8ac858c8bee27110992d704af81307a1bce263f612395e9f29b748a3b676d4fa69c44f38a01158911ced1da0eb66c4d45720363b687921fbf6a23314accb6e5ac71120dd8b57059458099f5d507421dc87c009148147d0c4638a8492be41012974211dcd296c0b1f140cfb62cd57bcae3d2c55098a95d0fc3c3ff6d", 0xc0}], 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="380000000000000009010000040600008af42b9100006a42"], 0x18}}, {{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)="220a3f424981f55e88059d68cbf4d27bd9891a657eda2ab5a16a677994220d590e2e7b8a05506935efecdd717ba17e9b44c3790494d5a30af1bdd5255583955805d8723c898d3d329fec2a9af759736791d5c9766a501a13aa7508d613e45b8c6ba85fee5eb8ccf05ef1801db035b10f878dd7cadcc02f1a49d6ea6bb9ea52e9b46acc5c58a64017743ca0ea29e5335d1604d0c97b4f0bb76ca479016a6cc012dc49de38669c07e2ab5f9c0b57bb2879843d097d23b293dcbed690", 0xbb}, {&(0x7f0000000ac0)='r[', 0x2}], 0x2}}], 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000100)) 04:48:45 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=r3, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}]}}}]}, 0x44}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8001, 0x0) 04:48:45 executing program 3: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cf0d6076e0d4ea26901e931235203ae36a1407d18846b4c96509bd3784889565e1d87a25dd1854b11b03e3322769eb355e04d8d7876ee81ed124cd924943070d3c6e07f4358b9e37c03e7067536ebc84cea9763a103404aeeca2d78967b0bc5fbc7a475aaf229af83b93d1eaa7cb01d1b414", @ANYRES16=r3, @ANYBLOB="ff830a00000016000a00", @ANYRES16=r6], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 222.434672][T11401] IPVS: ftp: loaded support on port[0] = 21 04:48:45 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x0) 04:48:45 executing program 3: r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 222.707246][T11401] IPVS: ftp: loaded support on port[0] = 21 [ 222.725566][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 222.725587][ T28] audit: type=1804 audit(1600490925.367:92): pid=11429 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir770150192/syzkaller.xs0cEa/58/cgroup.controllers" dev="sda1" ino=16195 res=1 errno=0 [ 222.780274][ T7] bond0 (unregistering): Released all slaves 04:48:45 executing program 1 (fault-call:5 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:45 executing program 3: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 223.032188][T11460] FAULT_INJECTION: forcing a failure. [ 223.032188][T11460] name failslab, interval 1, probability 0, space 0, times 1 04:48:45 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x83, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r4, 0x9, 0x7fff}, 0x8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) accept4(r0, &(0x7f0000000000)=@rc={0x1f, @none}, &(0x7f0000000080)=0x80, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$AUDIT_TRIM(r6, 0x0, 0x40004) bind$bt_hci(r5, &(0x7f0000000280), 0x6) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000240), &(0x7f0000000300)=0x4) close(r5) r7 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r7, 0x10f, 0x84, &(0x7f0000000700), &(0x7f0000000740)=0x4) [ 223.116094][T11460] CPU: 0 PID: 11460 Comm: syz-executor.1 Not tainted 5.9.0-rc3-syzkaller #0 [ 223.124800][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.134846][T11460] Call Trace: [ 223.138141][T11460] dump_stack+0x198/0x1fd [ 223.142482][T11460] should_fail.cold+0x5/0x14 [ 223.147085][T11460] should_failslab+0x5/0xf [ 223.151504][T11460] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 223.157574][T11460] kmem_cache_alloc_trace+0x49/0x300 [ 223.162876][T11460] ? aa_path_link+0x2f0/0x2f0 [ 223.167563][T11460] alloc_pipe_info+0x10a/0x590 [ 223.172342][T11460] splice_direct_to_actor+0x779/0x980 [ 223.177724][T11460] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 223.183816][T11460] ? generic_splice_sendpage+0x140/0x140 [ 223.189463][T11460] ? apparmor_file_permission+0x26e/0x4e0 [ 223.195187][T11460] ? do_splice_to+0x170/0x170 [ 223.199870][T11460] ? security_file_permission+0x248/0x560 [ 223.205593][T11460] ? lock_acquire+0x1f3/0xae0 [ 223.210283][T11460] do_splice_direct+0x1b3/0x280 [ 223.215143][T11460] ? splice_direct_to_actor+0x980/0x980 [ 223.220700][T11460] ? __sb_start_write+0x1d5/0x470 [ 223.225727][T11460] do_sendfile+0x55f/0xd40 [ 223.230153][T11460] ? do_compat_pwritev64+0x1b0/0x1b0 [ 223.235446][T11460] ? __might_fault+0x190/0x1d0 [ 223.240217][T11460] __x64_sys_sendfile64+0x149/0x210 [ 223.245415][T11460] ? __ia32_sys_sendfile+0x220/0x220 [ 223.250708][T11460] ? syscall_enter_from_user_mode+0x20/0x290 [ 223.256691][T11460] ? lockdep_hardirqs_on+0x53/0x100 [ 223.261918][T11460] do_syscall_64+0x2d/0x70 [ 223.266341][T11460] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 223.272231][T11460] RIP: 0033:0x45d5f9 [ 223.276125][T11460] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 223.295751][T11460] RSP: 002b:00007fa291654c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 223.304162][T11460] RAX: ffffffffffffffda RBX: 0000000000027a00 RCX: 000000000045d5f9 [ 223.312133][T11460] RDX: 0000000020000040 RSI: 0000000000000003 RDI: 0000000000000004 [ 223.320103][T11460] RBP: 00007fa291654ca0 R08: 0000000000000000 R09: 0000000000000000 [ 223.328077][T11460] R10: 00000000000022ea R11: 0000000000000246 R12: 0000000000000000 [ 223.336049][T11460] R13: 00007ffdac9cc43f R14: 00007fa2916559c0 R15: 000000000118cf4c 04:48:46 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x3, @loopback, 0x46}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@mcast1}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x6, 0x800, 0x3}, 0xe) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x5, 0x8}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xa, 0x1, 0x8000, 0x81, 0x100, r5, 0x6, [], 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x40) bpf$MAP_UPDATE_ELEM(0x16, &(0x7f0000000140)={r6, 0x0, 0x0, 0x4}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r4}, 0x10) 04:48:46 executing program 3: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8) r2 = openat$cgroup_ro(r1, &(0x7f0000000280)='memory.swap.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r2, 0x0, 0x800000000000c) socket(0x0, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f00000001c0)='ns/time\x00') ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)=r4) r5 = socket$inet6(0xa, 0x803, 0x2) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000380)={{&(0x7f00000002c0)=""/88, 0x58}, &(0x7f0000000340), 0x2}, 0x20) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000000a40)=[{{&(0x7f00000003c0)=@phonet={0x23, 0x5, 0x9, 0x97}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)="7036956c6d1b2988ef3aec27ffe11342e323d5219a574f6f9fcda7375b0d87f12561bcd94ea10d002c9f46efd1bcfb4f04d7056bc7ef4f4b1dcfeed6814c384d9676f565557702c0200945bf542934b8d875b6ba82d4f83acdb1cef0af77de441e4ee70bdf896a9df6bdf386a407bed2d61f25d6c7e6a5d9252c4aa9cf9f9d6f70e9d16b1e254123b319599d7a76009a2bdcbeb9fd79bbbfa92f87df623cb6c630edf21d991f25658b78e27b92e0ef12217a92774294ca6cc8fb4f757c2e56e5d60cc277", 0xc4}, {&(0x7f00000005c0)="ea850d72ac2f516c73ba83b50e08e47ce16aeaf6d1ffcb5b23f9c5eff9aa933fdda8213bbe1b720260f29718eaf93657ca95abc0ace6ff2bb3d9446c1cecd6ef5522196bf43fb7d9cd03629962c83342b1e395b97ec9d0e047859c0403da2af5048a43ebbdeb93882021303ba28f5aafd96227", 0x73}, {&(0x7f0000000640)="33395140897f01b650a7b6f78e70a922ae978022de0a172c6a8ef0f09b9be60425dd91f3f498a32b23cd7d4cec98f72fb78624d0b29f860309", 0x39}, {&(0x7f0000000680)="c0af737fccca4f3af55ba599a77ea59b64e520175806cefd24ac9d8751adc8944e6142188c998eadfb05bd26849d7262591d3f076853c326ccd5e7eea88adb014e623a5ef6a5e06b724c96676c127cff8214717528d1280a66789b70cd8db55c8e5b04ca48a7e892dfabe453031ad0e607aabbbba4281a124bb210969ffe06d91620c7e4aba3f57164faba84b90fe033623ff4b3596c3dbe7e608f92b3e2bd82264c871da7aafb251bacbdee860fa92b3b5943d357913f60708a5bacffc9", 0xbe}, {&(0x7f0000000740)="7fd2c11911fcbcb910ba650b8fa9c3e87205adbe6344202046c9fdd477deee7f28dafcfc7207b7b84b773356f37e2bdcc29ac71768c1b4c81633fb7b936c4af324f304b6a8ac858c8bee27110992d704af81307a1bce263f612395e9f29b748a3b676d4fa69c44f38a01158911ced1da0eb66c4d45720363b687921fbf6a23314accb6e5ac71120dd8b57059458099f5d507421dc87c009148147d0c4638a8492be41012974211dcd296c0b1f140cfb62cd57bcae3d2c55098a95d0fc3c3ff6d", 0xc0}], 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="380000000000000009010000040600008af42b9100006a42"], 0x18}}, {{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000940)="220a3f424981f55e88059d68cbf4d27bd9891a657eda2ab5a16a677994220d590e2e7b8a05506935efecdd717ba17e9b44c3790494d5a30af1bdd5255583955805d8723c898d3d329fec2a9af759736791d5c9766a501a13aa7508d613e45b8c6ba85fee5eb8ccf05ef1801db035b10f878dd7cadcc02f1a49d6ea6bb9ea52e9b46acc5c58a64017743ca0ea29e5335d1604d0c97b4f0bb76ca479016a6cc012dc49de38669c07e2ab5f9c0b57bb2879843d097d23b293dcbed690", 0xbb}, {&(0x7f0000000ac0)='r[', 0x2}], 0x2}}], 0x2, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f0000000100)) 04:48:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010020"], 0x1c}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001140)={0xdc, 0x0, 0x204, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7efa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x271}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcc6e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40081}, 0x40890) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') read(r0, &(0x7f0000000140)=""/4096, 0x1000) 04:48:46 executing program 3: r0 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 223.635474][T11493] IPVS: ftp: loaded support on port[0] = 21 04:48:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010020"], 0x1c}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001140)={0xdc, 0x0, 0x204, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7efa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x271}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xcc6e}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40081}, 0x40890) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00') read(r0, &(0x7f0000000140)=""/4096, 0x1000) 04:48:46 executing program 3: socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:46 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900), 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000140)=""/14, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0), 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r1 = socket(0x5, 0x800, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x7fffffff) recvfrom(r4, &(0x7f0000000040)=""/184, 0xfffffffffffffe07, 0x40012500, 0x0, 0xfffffe53) r5 = socket(0x400000000010, 0x2, 0x0) write(r5, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x41032, r1, 0x13f5c000) mmap(&(0x7f00000aa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004040)={&(0x7f00000009c0)={0x630, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xc2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ca}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r2}}}]}}]}, 0x630}, 0x1, 0x0, 0x0, 0x44000}, 0x4c0d1) 04:48:46 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x4924924924924cb, 0x4800) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x20, 0x70bd2d, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48880}, 0xd1d8fe6ca1780872) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000001c0)={'veth1_to_batadv\x00', {0x2, 0x4e23, @broadcast}}) sendmmsg(0xffffffffffffffff, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) connect(0xffffffffffffffff, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x2, @broadcast, 'rose0\x00'}}, 0x80) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x22}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}}, 0x20000800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0xc000) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) [ 224.189537][T11532] IPVS: ftp: loaded support on port[0] = 21 04:48:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:48:46 executing program 3: socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:47 executing program 4: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0302000000000000140012000c000100626f6e64"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=@newlink={0x44, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}]}}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)) syz_genetlink_get_family_id$l2tp(0x0) sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x80, 0x0, 0xfffffff9, "5f4bdf3441ffa43367535f6427fac1b968744ccdc5bfad8aa4aa3689fee95c46f271fb97c30bb14b5494afda82a7306ba474f8635e65946e264693f49abc0315452615d4bd8f9cc8718e84d81e1cf3800a4e0a5961fab323071744e89d6df78cf41e42d8dc48d3bf7894c85b3f5f"}, 0x80, 0x44000}, 0x40820) 04:48:47 executing program 3: socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 224.542713][T11561] IPVS: ftp: loaded support on port[0] = 21 04:48:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x2, 0x22ea) 04:48:47 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:47 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x4, 0x22ea) 04:48:47 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 225.473790][T11598] IPVS: ftp: loaded support on port[0] = 21 [ 225.485313][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 04:48:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x5, 0x22ea) [ 225.701588][T11561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.741308][T11631] IPVS: ftp: loaded support on port[0] = 21 [ 225.757021][T11562] bond0: (slave xfrm0): The slave device specified does not support setting the MAC address [ 225.820961][T11562] bond0: (slave xfrm0): Error -95 calling set_mac_address 04:48:48 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x380000d, 0x6031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000900), 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000140)=""/14, 0x20000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0), 0x4) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080)=0x2, 0x4) r1 = socket(0x5, 0x800, 0x0) bind(0xffffffffffffffff, &(0x7f0000000940)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) bind$xdp(0xffffffffffffffff, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[], 0x7fffffff) recvfrom(r4, &(0x7f0000000040)=""/184, 0xfffffffffffffe07, 0x40012500, 0x0, 0xfffffe53) r5 = socket(0x400000000010, 0x2, 0x0) write(r5, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x41032, r1, 0x13f5c000) mmap(&(0x7f00000aa000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000004080)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004040)={&(0x7f00000009c0)={0x630, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xc2}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7ca}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r2}}}]}}]}, 0x630}, 0x1, 0x0, 0x0, 0x44000}, 0x4c0d1) [ 226.648130][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 04:48:49 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000100), &(0x7f0000000140)=0x8) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180), 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x3, &(0x7f0000000000)=[{0x5, 0x12, 0x3}, {0xd2f7, 0x45, 0x5, 0x2}, {0x20, 0x4, 0x0, 0x9b}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000040)=[{0x80000006}]}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 04:48:49 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x6, 0x22ea) 04:48:49 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) unshare(0x40000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$qrtr(r3, &(0x7f0000000000)={0x2a, 0x3, 0x2}, 0xc) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @multicast1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000200), 0x8) 04:48:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="33000000180081ae08060c04000f000480207f03fe0400058701546f170009000800000000006596bc014e18bbdfede6efb408", 0x33}], 0x1, 0x0, 0x0, 0xf00}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) sendfile(r2, r3, &(0x7f0000000080)=0x7, 0x8) getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 227.296285][T11709] IPVS: ftp: loaded support on port[0] = 21 04:48:50 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x7, 0x22ea) 04:48:50 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xc, 0x22ea) 04:48:50 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0, 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:50 executing program 0: 04:48:50 executing program 2: 04:48:50 executing program 0: 04:48:50 executing program 2: 04:48:50 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0, 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 228.194628][T11709] IPVS: ftp: loaded support on port[0] = 21 04:48:51 executing program 4: 04:48:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10, 0x22ea) 04:48:51 executing program 0: 04:48:51 executing program 2: 04:48:51 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0, 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:51 executing program 2: 04:48:51 executing program 0: 04:48:51 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:51 executing program 4: 04:48:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x12, 0x22ea) 04:48:51 executing program 2: 04:48:51 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:51 executing program 0: 04:48:51 executing program 4: 04:48:51 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x884a5, 0x16}) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r4}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000000c0)=0x8000005, 0x4) splice(r0, 0x0, r2, 0x0, 0x422, 0x0) 04:48:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x281, 0x22ea) 04:48:51 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:51 executing program 4: r0 = socket(0x10, 0x80002, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x5c, r1, 0xf07, 0x0, 0x0, {0x2, 0x6}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5c}}, 0x0) 04:48:51 executing program 0: 04:48:52 executing program 0: 04:48:52 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:52 executing program 4: 04:48:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x408, 0x22ea) 04:48:52 executing program 0: 04:48:52 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @window={0x3, 0x0, 0x6}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r3 = socket(0xa, 0x3, 0x84) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 04:48:52 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 229.782688][T11835] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING 04:48:52 executing program 2: syz_emit_ethernet(0x32, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac14140e, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 04:48:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x500, 0x22ea) 04:48:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x3}, 0x14}}, 0x0) 04:48:52 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 04:48:52 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c00010001000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x600, 0x22ea) 04:48:52 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x3c, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 230.279763][T11852] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:53 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x10}, 0x4) [ 230.344948][T11852] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:53 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c00010001000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:53 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4$inet(r1, 0x0, 0x0, 0x0) 04:48:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x700, 0x22ea) 04:48:53 executing program 2: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0) [ 230.606799][T11865] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:53 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0x11, 0x0, &(0x7f0000000540)) [ 230.650900][T11865] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:53 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c00010001000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:53 executing program 2: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000002031f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000030307031dfffd946ff20c0020200a0009000100021d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) 04:48:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 04:48:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x804, 0x22ea) 04:48:53 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000040), 0x8) [ 230.869108][T11880] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.893163][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.917072][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:53 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c000700"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:53 executing program 4: syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @random="8014906c6b6b", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) 04:48:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0xc, 0x6, 0x201}, 0x14}}, 0x0) [ 231.125555][T11895] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.140721][T11895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:53 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c000700"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:53 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:53 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xc00, 0x22ea) 04:48:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f4, 0x0, 0x17c, 0x17c, 0x168, 0x5, 0x22c, 0x260, 0x260, 0x22c, 0x260, 0x7fffffe, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'ipvlan0\x00', 'vcan0\x00'}, 0x0, 0x100, 0x168, 0x52020000, {}, [@common=@unspec=@state={{0x24, 'state\x00'}}, @common=@unspec=@statistic={{0x38, 'statistic\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@mcast2, @remote, [], [], 'ip6tnl0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x350) 04:48:54 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) [ 231.348745][T11905] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.386550][T11905] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c000700"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x1200, 0x22ea) 04:48:54 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200)='ethtool\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)={0x38, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x38}}, 0x0) [ 231.624153][T11920] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c0008000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:54 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7954244cef7499cde2bbaf4b06d3585a09a87507ebf4e43bc06"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 04:48:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x3f00, 0x22ea) 04:48:54 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c0008000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 231.957853][ T7] tipc: TX() has been purged, node left! [ 231.997157][ T7] tipc: TX() has been purged, node left! [ 232.030557][ T7] tipc: TX() has been purged, node left! [ 232.068063][ T7] tipc: TX() has been purged, node left! [ 232.095293][ T7] tipc: TX() has been purged, node left! [ 232.121488][ T7] tipc: TX() has been purged, node left! 04:48:54 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 232.151099][ T7] tipc: TX() has been purged, node left! [ 232.218132][ T7] tipc: TX() has been purged, node left! [ 232.243041][ T7] tipc: TX() has been purged, node left! [ 232.264262][ T7] tipc: TX() has been purged, node left! 04:48:55 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:48:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x8008, 0x22ea) 04:48:55 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c0008000000"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:55 executing program 4: r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'macsec0\x00', @dev}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'macsec0\x00', @link_local={0x1, 0x7d}}) 04:48:55 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 232.472300][T11954] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 04:48:55 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 232.519417][T11954] device veth1_macvtap left promiscuous mode 04:48:55 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x8102, 0x22ea) 04:48:55 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xff01, 0x22ea) 04:48:55 executing program 2: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 232.999101][T11956] device veth1_macvtap entered promiscuous mode [ 233.010369][T11956] device macsec0 entered promiscuous mode 04:48:55 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 233.210180][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 04:48:56 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:48:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xff0f, 0x22ea) 04:48:56 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:56 executing program 4: r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'macsec0\x00', @dev}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000700)={'macsec0\x00', @link_local={0x1, 0x7d}}) 04:48:56 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:56 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x1517f, 0x22ea) 04:48:56 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:56 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x2866f, 0x22ea) [ 234.068428][T12004] device veth1_macvtap left promiscuous mode [ 234.074457][T12004] device macsec0 left promiscuous mode 04:48:56 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x40000, 0x22ea) 04:48:56 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:57 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:48:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x800000, 0x22ea) [ 234.529867][T12005] device veth1_macvtap entered promiscuous mode [ 234.548978][T12005] device macsec0 entered promiscuous mode 04:48:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x43, 0x0, &(0x7f00000000c0)) 04:48:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x1000000, 0x22ea) 04:48:57 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:57 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:57 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000200)=""/226, &(0x7f00000000c0)=0xe2) 04:48:57 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x2000000, 0x22ea) 04:48:57 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@alu]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 04:48:58 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) splice(r0, 0x0, r1, 0x0, 0x200000000e228, 0x0) 04:48:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:58 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x4000000, 0x22ea) 04:48:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x17, 0x101, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x12000000}, 0x0) 04:48:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:58 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:58 executing program 4: syz_emit_ethernet(0x42e, &(0x7f0000000400)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "923521", 0x3f8, 0x88, 0x0, @remote, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x21}, @fragment, @dstopts={0x0, 0x7a, [], [@calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, @enc_lim, @generic={0x0, 0x39a, "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"}]}], {0x0, 0x0, 0x8}}}}}}, 0x0) 04:48:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x5000000, 0x22ea) [ 235.823365][T12074] __nla_validate_parse: 8 callbacks suppressed [ 235.823375][T12074] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:58 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000002980)=[{&(0x7f0000001600)="d083b8778d9e055daedb2fb28df629afabdb0b25311ef1e77295a000a43e2610b846a5a59c06a800d3", 0x29}, {&(0x7f0000001400)="7507747dd9bcc24bc9201e9ab3851c2352e456a59990f36599f89b848cf73dba62e0ee4d214b4ea417ba047283d923aa85916b00b017843fb4dd334d8bf4ab10c73e81992e6fd44138b794415b5c6b261bc26106b7db3a6b8796ce064e031f8f35e3f749010000008dcfb2cf9155bfc646c3a8366660cd0474569f5f3e4d3617c4d53f96e575e43c1d887a5979520843f41b656ddcb3335a39a60945acc1550c", 0xa0}], 0x2) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="833e16e6231c7ae51ca6b6e193647bf630eff0f08c31548c5f1b8a4b90c82482e71a4e4d44ce5e66938e7b20189afbe0e8920e68b51b50b3569977798fdda9608c7044a0ef", 0x45}, {&(0x7f00000001c0)="31052857cfe93f16413da301379aca6d58929163bcf56a2a2b3a5e94be8d145a5421ea0d", 0x24}], 0x2) 04:48:58 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 236.115569][ T7] bond0 (unregistering): Released all slaves 04:48:58 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) splice(r0, 0x0, r1, 0x0, 0x200000000e228, 0x0) 04:48:58 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c0008000000000000000000300002000900"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:59 executing program 4: syz_emit_ethernet(0x22, &(0x7f0000000100)={@remote, @remote, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x0, 0x0, @dev, "", @broadcast}}}}, 0x0) 04:48:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x6000000, 0x22ea) 04:48:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 236.430014][T12095] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:59 executing program 4: r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000900300000200000000000000f000000000000000f0000000c0020000c0020000c0020000c0020000c0020000040000000000000000000000000000000000000000000000000000000000000000000000f00000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000941100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f00000000000000000000000000000000000000000000000000048005445450000b7000000000000000000750000000000000000000000000001ff01000000000000000000000000050069703665727360616e3000000000000000000000000000ec0a02000000000000000000003e0c708efe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006272695b67655f736c6176655f3100000010000000000000000000000000000000000000000000000000000000000000000000000200000000000003a800d000000000000000090000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ec000000000000000000010000000000000000000000000000000000000000000000d800000100000000000000f4ff00000000000000000000000000000030006d61726b00000000000a0000000000000000000000000000000000000001000c0000000000d3070000005de05d89280041554449540000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d000000000000000000000000000000000000000000000000000280000000000000000201e00000000000000000000003f000000000000000000feffffff"], 0x1) r1 = socket(0xa, 0x2400000001, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000080)=ANY=[], 0x1) 04:48:59 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x7000000, 0x22ea) [ 236.702721][T12107] x_tables: duplicate underflow at hook 2 [ 236.732393][T12107] x_tables: duplicate underflow at hook 2 04:48:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 236.756827][T12107] x_tables: duplicate underflow at hook 2 [ 236.797908][T12110] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:48:59 executing program 4: unshare(0x40000000) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='xfrm0\x00') 04:48:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x8040000, 0x22ea) [ 237.006381][T12118] IPVS: ftp: loaded support on port[0] = 21 [ 237.204733][T12118] IPVS: ftp: loaded support on port[0] = 21 04:48:59 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) splice(r0, 0x0, r1, 0x0, 0x200000000e228, 0x0) 04:48:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:48:59 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:48:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x8800000, 0x22ea) 04:49:00 executing program 4: r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f00000001c0), 0x4) [ 237.418513][T12171] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xc000000, 0x22ea) 04:49:00 executing program 4: syz_emit_ethernet(0x56, &(0x7f0000000080)={@remote, @remote, @void, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "5c485e61cda44e43ebb9c02a95c85a0cc8fdd2bf41f23a40cf4cf485db7a13e97f5ba51ec4764b38184e29fd7c606e6c032ad0dee1d56c485db2a0157fa33e34"}}}}, 0x0) 04:49:00 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:00 executing program 4: syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "923521", 0x10, 0x88, 0x0, @remote, @local, {[@srh={0x0, 0x0, 0x4, 0x0, 0x4}], {0x0, 0x0, 0x8}}}}}}, 0x0) [ 237.792098][T12190] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:00 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x10000000, 0x22ea) 04:49:00 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_IFALIAS={0x14, 0x14, 'veth1_to_team\x00'}]}, 0x34}}, 0x0) 04:49:00 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, 0x0, 0x0) [ 238.394432][T12211] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, 0x0, 0x0) 04:49:01 executing program 4: r0 = socket(0x2, 0x3, 0x67) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)=@abs, 0x6e) 04:49:01 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x12000000, 0x22ea) 04:49:01 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, 0x0, 0x0) 04:49:01 executing program 4: r0 = socket(0x2, 0x3, 0x67) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) [ 238.690298][T12225] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:01 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 239.214403][T12236] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:01 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1) 04:49:01 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x3f000000, 0x22ea) 04:49:02 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/user\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 04:49:02 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 239.407051][T12245] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 239.444147][T12245] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 04:49:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x6f860200, 0x22ea) 04:49:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 04:49:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 04:49:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x7f510100, 0x22ea) 04:49:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 04:49:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x81020000, 0x22ea) 04:49:02 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) [ 240.779895][T12250] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.801907][T12269] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 04:49:03 executing program 2: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 04:49:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xf4ffffff, 0x22ea) 04:49:03 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000000)) 04:49:03 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:03 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000000)) [ 241.014213][T12289] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xf5ffffff, 0x22ea) 04:49:03 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[], 0x37cb1133) socket$inet(0x2, 0x3, 0x33) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 04:49:03 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:03 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:04 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000000)) [ 241.320002][T12303] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xfeffffff, 0x22ea) 04:49:04 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 04:49:04 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000000)) [ 241.645861][T12315] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xff010000, 0x22ea) 04:49:04 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 04:49:04 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000000)) [ 241.987115][T12329] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:04 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000000)) 04:49:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x4001}, 0x54) 04:49:04 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xff0f0000, 0x22ea) 04:49:04 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 04:49:04 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 04:49:05 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge_slave_0\x00', 0x400}) [ 242.339913][T12340] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xffffff7f, 0x22ea) 04:49:05 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) 04:49:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 04:49:05 executing program 2: [ 242.675072][T12357] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xfffffff4, 0x22ea) 04:49:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000000)) 04:49:05 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) 04:49:05 executing program 2: 04:49:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) [ 242.971934][T12369] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:05 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:05 executing program 2: 04:49:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xfffffff5, 0x22ea) 04:49:05 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) 04:49:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) [ 243.380953][T12382] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:06 executing program 2: 04:49:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) 04:49:06 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0) 04:49:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xfffffffe, 0x22ea) 04:49:06 executing program 2: 04:49:06 executing program 4: [ 243.701942][T12396] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:06 executing program 2: 04:49:06 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:06 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0) 04:49:06 executing program 4: 04:49:06 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xffffffff000, 0x22ea) 04:49:06 executing program 2: [ 244.386030][T12412] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:07 executing program 4: 04:49:07 executing program 2: 04:49:07 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={0x0}}, 0x0) 04:49:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x800800000000, 0x22ea) 04:49:07 executing program 2: 04:49:07 executing program 4: 04:49:07 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:07 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:07 executing program 2: 04:49:07 executing program 4: 04:49:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x4000000000000, 0x22ea) 04:49:07 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:08 executing program 4: 04:49:08 executing program 2: 04:49:08 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x0, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x80000000000000, 0x22ea) 04:49:08 executing program 2: 04:49:08 executing program 4: 04:49:08 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0) 04:49:08 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:08 executing program 2: 04:49:08 executing program 4: 04:49:08 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0) 04:49:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xf0ffffff0f0000, 0x22ea) [ 246.330702][T12470] __nla_validate_parse: 3 callbacks suppressed [ 246.330713][T12470] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:09 executing program 4: 04:49:09 executing program 2: 04:49:09 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0) 04:49:09 executing program 4: 04:49:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x100000000000000, 0x22ea) 04:49:09 executing program 2: [ 246.620210][T12482] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:09 executing program 4: [ 246.956148][ T7] tipc: TX() has been purged, node left! [ 246.976902][ T7] tipc: TX() has been purged, node left! 04:49:09 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000e228, 0x0) 04:49:09 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 04:49:09 executing program 2: 04:49:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x200000000000000, 0x22ea) 04:49:09 executing program 4: [ 247.347715][T12500] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:10 executing program 4: 04:49:10 executing program 2: 04:49:10 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 04:49:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x400000000000000, 0x22ea) 04:49:10 executing program 4: 04:49:10 executing program 2: [ 247.627493][T12511] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:10 executing program 4: 04:49:10 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000e228, 0x0) 04:49:10 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 04:49:10 executing program 2: 04:49:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x500000000000000, 0x22ea) 04:49:10 executing program 4: 04:49:11 executing program 4: [ 248.302063][T12528] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:11 executing program 2: 04:49:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x600000000000000, 0x22ea) 04:49:11 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:11 executing program 2: 04:49:11 executing program 4: [ 248.570513][T12539] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:11 executing program 2: 04:49:11 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000e228, 0x0) 04:49:11 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:11 executing program 4: 04:49:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x700000000000000, 0x22ea) 04:49:11 executing program 2: [ 249.284989][T12556] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:12 executing program 2: 04:49:12 executing program 4: 04:49:12 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x804000000000000, 0x22ea) 04:49:12 executing program 2: 04:49:12 executing program 4: [ 249.590586][T12568] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:12 executing program 2: 04:49:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e228, 0x0) 04:49:12 executing program 4: 04:49:12 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x4c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 04:49:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xc00000000000000, 0x22ea) 04:49:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x478, 0x2e8, 0x1d, 0x294, 0x0, 0x294, 0x3b0, 0x378, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0xc2], 0x0, 0x2b4, 0x2e8, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150, 'hashlimit\x00'}, {'batadv_slave_1\x00', {0x9, 0x0, 0x63, 0x0, 0x0, 0x1, 0x401}}}, @common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "79e968880ccc1ead08db713078a9af4f9b88574f7f1bf77d65420c28387d342331a24364f67cdd5531e34b768a6af25a06020a619a8153fb71779c857f8a000f42a2770770960471510115cbbdcf01572fb35d1e47674b41b6c4a3dfe224559d8763d5f9bc9fbae3ee50f987a1ab15581079624c1d69074c91660b783b95127a", 0x54, 0x2}}]}, @common=@inet=@SET3={0x34, 'SET\x00'}}, {{@ipv6={@private1, @local, [], [], 'ipvlan0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00'}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) [ 250.301265][T12584] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:13 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 04:49:13 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89b1, &(0x7f0000000100)={'bond0\x00', @ifru_addrs=@nl}) 04:49:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e228, 0x0) 04:49:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x1000000000000000, 0x22ea) 04:49:13 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x4c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 04:49:13 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xa, 0xa, 0x6d, 0x8000000000000002}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000080)=@udp6, 0x2}, 0x20) [ 250.653982][T12603] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e228, 0x0) 04:49:13 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x4c, 0x30, 0x53b, 0x0, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) 04:49:13 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001900ff03840004f262300a410a"], 0x1}}, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 04:49:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x1200000000000000, 0x22ea) 04:49:13 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e228, 0x0) 04:49:13 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x1000000000000000, 0x22ea) 04:49:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x3f00000000000000, 0x22ea) 04:49:14 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e228, 0x0) 04:49:14 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e228, 0x0) [ 251.850037][T12638] __nla_validate_parse: 3 callbacks suppressed [ 251.850047][T12638] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x6f86020000000000, 0x22ea) 04:49:14 executing program 0: pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000e228, 0x0) 04:49:14 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:14 executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) [ 252.183420][T12656] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 04:49:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x7f51010000000000, 0x22ea) 04:49:14 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) [ 252.228551][T12658] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x3f000000, 0x22ea) 04:49:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x600, 0x22ea) 04:49:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x600, 0x22ea) 04:49:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0x8102000000000000, 0x22ea) 04:49:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="33000000180081ae08060c04000f000480207f03fe0400058701546f170009000800000000006596bc014e18bbdfede6efb408", 0x33}], 0x1, 0x0, 0x0, 0xf00}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) sendfile(r2, r3, &(0x7f0000000080)=0x7, 0x8) getpeername$netlink(r1, &(0x7f0000000000), &(0x7f0000000040)=0xc) 04:49:15 executing program 3 (fault-call:3 fault-nth:0): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xf4ffffff00000000, 0x22ea) [ 252.962710][T12687] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:15 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) [ 253.035925][T12689] FAULT_INJECTION: forcing a failure. [ 253.035925][T12689] name failslab, interval 1, probability 0, space 0, times 0 [ 253.132320][T12689] CPU: 1 PID: 12689 Comm: syz-executor.3 Not tainted 5.9.0-rc3-syzkaller #0 [ 253.141040][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.151090][T12689] Call Trace: [ 253.154408][T12689] dump_stack+0x198/0x1fd [ 253.158756][T12689] should_fail.cold+0x5/0x14 [ 253.163379][T12689] should_failslab+0x5/0xf [ 253.167801][T12689] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 253.173875][T12689] kmem_cache_alloc_node+0x50/0x430 [ 253.179082][T12689] __alloc_skb+0x71/0x550 [ 253.183423][T12689] netlink_sendmsg+0x94f/0xd90 [ 253.188195][T12689] ? netlink_unicast+0x7d0/0x7d0 [ 253.193141][T12689] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 253.198427][T12689] ? netlink_unicast+0x7d0/0x7d0 [ 253.203359][T12689] sock_sendmsg+0xcf/0x120 [ 253.207776][T12689] ____sys_sendmsg+0x6e8/0x810 [ 253.212547][T12689] ? kernel_sendmsg+0x50/0x50 [ 253.217227][T12689] ? do_recvmmsg+0x6d0/0x6d0 [ 253.221927][T12689] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 253.227907][T12689] ? lock_downgrade+0x830/0x830 [ 253.232769][T12689] ? _parse_integer+0x132/0x180 [ 253.237645][T12689] ___sys_sendmsg+0xf3/0x170 [ 253.242242][T12689] ? sendmsg_copy_msghdr+0x160/0x160 [ 253.247533][T12689] ? __fget_files+0x272/0x400 [ 253.252219][T12689] ? lock_downgrade+0x830/0x830 [ 253.257072][T12689] ? lock_is_held_type+0xbb/0xf0 [ 253.262014][T12689] ? find_held_lock+0x2d/0x110 [ 253.266794][T12689] ? __fget_files+0x294/0x400 [ 253.271477][T12689] ? __fget_light+0xea/0x280 [ 253.276073][T12689] __sys_sendmsg+0xe5/0x1b0 [ 253.280579][T12689] ? __sys_sendmsg_sock+0xb0/0xb0 [ 253.285613][T12689] ? syscall_enter_from_user_mode+0x20/0x290 [ 253.291592][T12689] ? lockdep_hardirqs_on+0x53/0x100 [ 253.296800][T12689] do_syscall_64+0x2d/0x70 [ 253.301222][T12689] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 253.307117][T12689] RIP: 0033:0x45d5f9 [ 253.311010][T12689] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:49:16 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 253.330654][T12689] RSP: 002b:00007f6416bfcc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.339062][T12689] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5f9 [ 253.347035][T12689] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000004 [ 253.355008][T12689] RBP: 00007f6416bfcca0 R08: 0000000000000000 R09: 0000000000000000 [ 253.362977][T12689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.370945][T12689] R13: 00007ffd5e7d5a1f R14: 00007f6416bfd9c0 R15: 000000000118cfec 04:49:16 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) [ 253.473064][T12696] FAULT_INJECTION: forcing a failure. [ 253.473064][T12696] name failslab, interval 1, probability 0, space 0, times 0 [ 253.490190][T12697] FAULT_INJECTION: forcing a failure. [ 253.490190][T12697] name failslab, interval 1, probability 0, space 0, times 0 [ 253.569774][T12696] CPU: 1 PID: 12696 Comm: syz-executor.2 Not tainted 5.9.0-rc3-syzkaller #0 [ 253.578488][T12696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.588532][T12696] Call Trace: [ 253.591819][T12696] dump_stack+0x198/0x1fd [ 253.596141][T12696] should_fail.cold+0x5/0x14 [ 253.600712][T12696] ? lock_is_held_type+0xbb/0xf0 [ 253.605643][T12696] should_failslab+0x5/0xf [ 253.610044][T12696] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 253.616094][T12696] kmem_cache_alloc+0x46/0x3f0 [ 253.620874][T12696] dst_alloc+0x9e/0x641 [ 253.625015][T12696] rt_dst_alloc+0x73/0x430 [ 253.629421][T12696] ip_route_output_key_hash_rcu+0x822/0x26b0 [ 253.635391][T12696] ip_route_output_key_hash+0x1a4/0x2f0 [ 253.640921][T12696] ? ip_route_output_key_hash_rcu+0x26b0/0x26b0 [ 253.647175][T12696] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 253.653146][T12696] __ip4_datagram_connect+0x732/0x1470 [ 253.658598][T12696] __ip6_datagram_connect+0xdae/0x1540 [ 253.664042][T12696] ? mark_lock+0xbc/0x17f0 [ 253.668440][T12696] ? lock_downgrade+0x830/0x830 [ 253.673293][T12696] ? ip6_datagram_release_cb+0x530/0x530 [ 253.678910][T12696] ? lock_sock_nested+0x94/0x110 [ 253.683828][T12696] ? __local_bh_enable_ip+0x10f/0x1f0 [ 253.689199][T12696] ? check_preemption_disabled+0x50/0x130 [ 253.694897][T12696] ? __local_bh_enable_ip+0x10f/0x1f0 [ 253.700285][T12696] ? ip6_datagram_connect+0x2b/0x40 [ 253.705461][T12696] ip6_datagram_connect+0x2b/0x40 [ 253.710467][T12696] inet_dgram_connect+0x14a/0x2d0 [ 253.715485][T12696] ? inet_autobind+0x190/0x190 [ 253.720228][T12696] __sys_connect_file+0x155/0x1a0 [ 253.725230][T12696] __sys_connect+0x161/0x190 [ 253.729799][T12696] ? __sys_connect_file+0x1a0/0x1a0 [ 253.734976][T12696] ? vfs_write+0x1b0/0x730 [ 253.739374][T12696] ? fput_many+0x2f/0x1a0 [ 253.743701][T12696] ? lock_is_held_type+0xbb/0xf0 [ 253.748621][T12696] ? syscall_enter_from_user_mode+0x20/0x290 [ 253.754596][T12696] ? check_preemption_disabled+0x50/0x130 [ 253.760292][T12696] ? syscall_enter_from_user_mode+0x20/0x290 [ 253.766251][T12696] __x64_sys_connect+0x6f/0xb0 [ 253.770995][T12696] do_syscall_64+0x2d/0x70 [ 253.775393][T12696] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 253.781265][T12696] RIP: 0033:0x45d5f9 [ 253.785141][T12696] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.804722][T12696] RSP: 002b:00007fd303126c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 253.813112][T12696] RAX: ffffffffffffffda RBX: 0000000000002380 RCX: 000000000045d5f9 [ 253.821062][T12696] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000003 [ 253.829017][T12696] RBP: 00007fd303126ca0 R08: 0000000000000000 R09: 0000000000000000 [ 253.836969][T12696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.844930][T12696] R13: 00007ffde7b84caf R14: 00007fd3031279c0 R15: 000000000118cf4c [ 253.882949][T12697] CPU: 1 PID: 12697 Comm: syz-executor.4 Not tainted 5.9.0-rc3-syzkaller #0 [ 253.891655][T12697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.901753][T12697] Call Trace: [ 253.905052][T12697] dump_stack+0x198/0x1fd [ 253.909396][T12697] should_fail.cold+0x5/0x14 [ 253.913995][T12697] ? tomoyo_realpath_from_path+0xc3/0x620 [ 253.919707][T12697] should_failslab+0x5/0xf [ 253.924126][T12697] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 253.930176][T12697] __kmalloc+0x6f/0x360 [ 253.934322][T12697] tomoyo_realpath_from_path+0xc3/0x620 [ 253.939854][T12697] ? tomoyo_profile+0x42/0x50 [ 253.944520][T12697] tomoyo_path_number_perm+0x1d5/0x590 [ 253.949957][T12697] ? tomoyo_path_number_perm+0x18d/0x590 [ 253.955590][T12697] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 253.961392][T12697] ? find_held_lock+0x2d/0x110 [ 253.966160][T12697] ? ksys_write+0x212/0x250 [ 253.970656][T12697] ? __mutex_unlock_slowpath+0xe2/0x610 [ 253.976189][T12697] ? __fget_files+0x294/0x400 [ 253.980860][T12697] security_file_ioctl+0x50/0xb0 [ 253.985799][T12697] __x64_sys_ioctl+0xb3/0x200 [ 253.990457][T12697] do_syscall_64+0x2d/0x70 [ 253.994866][T12697] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 254.000754][T12697] RIP: 0033:0x45d5f9 [ 254.004630][T12697] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.024241][T12697] RSP: 002b:00007f9d650ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:49:16 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xf5ffffff00000000, 0x22ea) [ 254.032632][T12697] RAX: ffffffffffffffda RBX: 000000000001e180 RCX: 000000000045d5f9 [ 254.040595][T12697] RDX: 0000000020000000 RSI: 00000000400448e1 RDI: 0000000000000004 [ 254.048545][T12697] RBP: 00007f9d650ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 254.056495][T12697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.064449][T12697] R13: 00007fffda7f032f R14: 00007f9d650ed9c0 R15: 000000000118cf4c 04:49:16 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 254.143704][T12705] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.153481][T12697] ERROR: Out of memory at tomoyo_realpath_from_path. 04:49:16 executing program 2 (fault-call:2 fault-nth:1): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:16 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 04:49:16 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 254.338179][T12712] FAULT_INJECTION: forcing a failure. [ 254.338179][T12712] name failslab, interval 1, probability 0, space 0, times 0 04:49:17 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xfeffffff00000000, 0x22ea) [ 254.431547][T12716] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.455901][T12712] CPU: 1 PID: 12712 Comm: syz-executor.2 Not tainted 5.9.0-rc3-syzkaller #0 [ 254.464604][T12712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.474670][T12712] Call Trace: [ 254.477978][T12712] dump_stack+0x198/0x1fd [ 254.481420][T12716] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.482315][T12712] should_fail.cold+0x5/0x14 [ 254.482359][T12712] ? lock_is_held_type+0xbb/0xf0 [ 254.482378][T12712] should_failslab+0x5/0xf [ 254.505547][T12712] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 254.511618][T12712] kmem_cache_alloc+0x46/0x3f0 [ 254.516395][T12712] dst_alloc+0x9e/0x641 [ 254.520563][T12712] rt_dst_alloc+0x73/0x430 [ 254.524985][T12712] ip_route_output_key_hash_rcu+0x822/0x26b0 04:49:17 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x2, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 254.530977][T12712] ip_route_output_key_hash+0x1a4/0x2f0 [ 254.536526][T12712] ? ip_route_output_key_hash_rcu+0x26b0/0x26b0 [ 254.542778][T12712] ? lockdep_hardirqs_on+0x53/0x100 [ 254.547987][T12712] ip_route_output_flow+0x23/0xc0 [ 254.553017][T12712] __ip4_datagram_connect+0x7da/0x1470 [ 254.558492][T12712] __ip6_datagram_connect+0xdae/0x1540 [ 254.564053][T12712] ? mark_lock+0xbc/0x17f0 [ 254.568476][T12712] ? lock_downgrade+0x830/0x830 [ 254.573348][T12712] ? ip6_datagram_release_cb+0x530/0x530 [ 254.578993][T12712] ? lock_sock_nested+0x94/0x110 [ 254.583932][T12712] ? __local_bh_enable_ip+0x10f/0x1f0 [ 254.589309][T12712] ? check_preemption_disabled+0x50/0x130 [ 254.595034][T12712] ? __local_bh_enable_ip+0x10f/0x1f0 [ 254.600422][T12712] ? ip6_datagram_connect+0x2b/0x40 [ 254.605623][T12712] ip6_datagram_connect+0x2b/0x40 [ 254.610649][T12712] inet_dgram_connect+0x14a/0x2d0 [ 254.615677][T12712] ? inet_autobind+0x190/0x190 [ 254.619708][T12723] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.620440][T12712] __sys_connect_file+0x155/0x1a0 [ 254.620475][T12712] __sys_connect+0x161/0x190 [ 254.639311][T12712] ? __sys_connect_file+0x1a0/0x1a0 [ 254.644512][T12712] ? vfs_write+0x1b0/0x730 [ 254.648935][T12712] ? fput_many+0x2f/0x1a0 [ 254.653286][T12712] ? lock_is_held_type+0xbb/0xf0 [ 254.658233][T12712] ? syscall_enter_from_user_mode+0x20/0x290 [ 254.664218][T12712] ? check_preemption_disabled+0x50/0x130 [ 254.669941][T12712] ? syscall_enter_from_user_mode+0x20/0x290 [ 254.675929][T12712] __x64_sys_connect+0x6f/0xb0 [ 254.676732][T12723] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.680688][T12712] do_syscall_64+0x2d/0x70 [ 254.680706][T12712] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 254.680717][T12712] RIP: 0033:0x45d5f9 [ 254.680735][T12712] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.723745][T12712] RSP: 002b:00007fd303126c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a 04:49:17 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x3, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 254.732159][T12712] RAX: ffffffffffffffda RBX: 0000000000002380 RCX: 000000000045d5f9 [ 254.740133][T12712] RDX: 000000000000001c RSI: 0000000020000080 RDI: 0000000000000003 [ 254.748102][T12712] RBP: 00007fd303126ca0 R08: 0000000000000000 R09: 0000000000000000 [ 254.756070][T12712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.764041][T12712] R13: 00007ffde7b84caf R14: 00007fd3031279c0 R15: 000000000118cf4c [ 254.784439][T12717] FAULT_INJECTION: forcing a failure. [ 254.784439][T12717] name failslab, interval 1, probability 0, space 0, times 0 [ 254.821751][T12717] CPU: 1 PID: 12717 Comm: syz-executor.4 Not tainted 5.9.0-rc3-syzkaller #0 [ 254.830446][T12717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 254.840496][T12717] Call Trace: [ 254.843795][T12717] dump_stack+0x198/0x1fd [ 254.848148][T12717] should_fail.cold+0x5/0x14 [ 254.852936][T12717] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 254.858327][T12717] should_failslab+0x5/0xf [ 254.862755][T12717] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 254.868835][T12717] __kmalloc+0x6f/0x360 [ 254.872995][T12717] ? tomoyo_realpath_from_path+0xc3/0x620 [ 254.878720][T12717] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 254.884265][T12717] ? trace_kmalloc+0xfd/0x130 [ 254.888954][T12717] tomoyo_encode2.part.0+0xe9/0x3a0 [ 254.894161][T12717] tomoyo_encode+0x28/0x50 [ 254.898589][T12717] tomoyo_realpath_from_path+0x186/0x620 [ 254.904230][T12717] ? tomoyo_profile+0x42/0x50 [ 254.908917][T12717] tomoyo_path_number_perm+0x1d5/0x590 [ 254.914381][T12717] ? tomoyo_path_number_perm+0x18d/0x590 [ 254.920018][T12717] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 254.925830][T12717] ? find_held_lock+0x2d/0x110 [ 254.930617][T12717] ? ksys_write+0x212/0x250 [ 254.935145][T12717] ? __mutex_unlock_slowpath+0xe2/0x610 [ 254.940710][T12717] ? __fget_files+0x294/0x400 [ 254.945397][T12717] security_file_ioctl+0x50/0xb0 [ 254.950345][T12717] __x64_sys_ioctl+0xb3/0x200 [ 254.955033][T12717] do_syscall_64+0x2d/0x70 [ 254.959460][T12717] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 254.965349][T12717] RIP: 0033:0x45d5f9 [ 254.969250][T12717] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 254.988854][T12717] RSP: 002b:00007f9d650ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.997263][T12717] RAX: ffffffffffffffda RBX: 000000000001e180 RCX: 000000000045d5f9 [ 255.005232][T12717] RDX: 0000000020000000 RSI: 00000000400448e1 RDI: 0000000000000004 [ 255.017027][T12717] RBP: 00007f9d650ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 255.024996][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.032963][T12717] R13: 00007fffda7f032f R14: 00007f9d650ed9c0 R15: 000000000118cf4c [ 255.049006][T12730] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xff01000000000000, 0x22ea) [ 255.124393][T12717] ERROR: Out of memory at tomoyo_realpath_from_path. 04:49:17 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x4, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:17 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 04:49:17 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xff0f000000000000, 0x22ea) [ 255.334007][T12747] FAULT_INJECTION: forcing a failure. [ 255.334007][T12747] name failslab, interval 1, probability 0, space 0, times 0 [ 255.406958][T12747] CPU: 0 PID: 12747 Comm: syz-executor.4 Not tainted 5.9.0-rc3-syzkaller #0 [ 255.415686][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 255.425740][T12747] Call Trace: [ 255.429051][T12747] dump_stack+0x198/0x1fd [ 255.433390][T12747] should_fail.cold+0x5/0x14 [ 255.437988][T12747] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 255.443361][T12747] should_failslab+0x5/0xf [ 255.447783][T12747] slab_pre_alloc_hook.constprop.0+0xf4/0x1f0 [ 255.453858][T12747] __kmalloc+0x6f/0x360 [ 255.458043][T12747] ? tomoyo_realpath_from_path+0xc3/0x620 [ 255.463791][T12747] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 255.469335][T12747] ? trace_kmalloc+0xfd/0x130 [ 255.474017][T12747] tomoyo_encode2.part.0+0xe9/0x3a0 [ 255.479224][T12747] tomoyo_encode+0x28/0x50 [ 255.483658][T12747] tomoyo_realpath_from_path+0x186/0x620 [ 255.489296][T12747] ? tomoyo_profile+0x42/0x50 [ 255.493999][T12747] tomoyo_path_number_perm+0x1d5/0x590 [ 255.499458][T12747] ? tomoyo_path_number_perm+0x18d/0x590 [ 255.505100][T12747] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 255.510906][T12747] ? find_held_lock+0x2d/0x110 [ 255.515679][T12747] ? ksys_write+0x212/0x250 [ 255.520204][T12747] ? __mutex_unlock_slowpath+0xe2/0x610 [ 255.525770][T12747] ? __fget_files+0x294/0x400 [ 255.530459][T12747] security_file_ioctl+0x50/0xb0 [ 255.535409][T12747] __x64_sys_ioctl+0xb3/0x200 [ 255.540094][T12747] do_syscall_64+0x2d/0x70 [ 255.544518][T12747] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 255.550409][T12747] RIP: 0033:0x45d5f9 [ 255.554305][T12747] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 255.574012][T12747] RSP: 002b:00007f9d650ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.582429][T12747] RAX: ffffffffffffffda RBX: 000000000001e180 RCX: 000000000045d5f9 [ 255.590404][T12747] RDX: 0000000020000000 RSI: 00000000400448e1 RDI: 0000000000000004 [ 255.598379][T12747] RBP: 00007f9d650ecca0 R08: 0000000000000000 R09: 0000000000000000 04:49:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xffffff7f00000000, 0x22ea) 04:49:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:18 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x5, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 255.606350][T12747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.614318][T12747] R13: 00007fffda7f032f R14: 00007f9d650ed9c0 R15: 000000000118cf4c 04:49:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0x2, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:18 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xffffffff00000000, 0x22ea) 04:49:18 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x6, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 256.057284][T12747] ERROR: Out of memory at tomoyo_realpath_from_path. 04:49:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0x25, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:18 executing program 4 (fault-call:1 fault-nth:3): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 04:49:18 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x8, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040)=0xffffffffffffffff, 0x22ea) 04:49:18 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 256.298161][T12791] FAULT_INJECTION: forcing a failure. [ 256.298161][T12791] name failslab, interval 1, probability 0, space 0, times 0 [ 256.351859][T12791] CPU: 1 PID: 12791 Comm: syz-executor.4 Not tainted 5.9.0-rc3-syzkaller #0 [ 256.360571][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.370621][T12791] Call Trace: [ 256.373948][T12791] dump_stack+0x198/0x1fd [ 256.378295][T12791] should_fail.cold+0x5/0x14 [ 256.382896][T12791] should_failslab+0x5/0xf [ 256.387318][T12791] slab_pre_alloc_hook.constprop.0+0x3d/0x1f0 [ 256.393506][T12791] kmem_cache_alloc_node_trace+0x55/0x430 04:49:19 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x9, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22f1) [ 256.399232][T12791] ? __alloc_skb+0x71/0x550 [ 256.403739][T12791] ? rcu_read_lock_sched_held+0x3a/0xb0 [ 256.409288][T12791] ? kmem_cache_alloc_node+0x38d/0x430 [ 256.414755][T12791] __kmalloc_node_track_caller+0x38/0x60 [ 256.420393][T12791] __alloc_skb+0xae/0x550 [ 256.424737][T12791] create_monitor_ctrl_open+0x16c/0x680 [ 256.430286][T12791] ? apparmor_capable+0x1d8/0x460 [ 256.435316][T12791] ? create_monitor_ctrl_close+0x460/0x460 [ 256.441138][T12791] ? bpf_lsm_capable+0x5/0x10 [ 256.445816][T12791] ? security_capable+0x8f/0xc0 [ 256.450678][T12791] hci_sock_ioctl+0x625/0x800 [ 256.455375][T12791] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 256.461198][T12791] ? create_monitor_event+0x820/0x820 [ 256.466585][T12791] sock_do_ioctl+0xcb/0x2d0 [ 256.471095][T12791] ? compat_ifr_data_ioctl+0x150/0x150 [ 256.476565][T12791] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 256.482463][T12791] ? do_vfs_ioctl+0x27d/0x1090 [ 256.487234][T12791] ? generic_block_fiemap+0x60/0x60 [ 256.492441][T12791] sock_ioctl+0x3b8/0x730 [ 256.496776][T12791] ? dlci_ioctl_set+0x30/0x30 04:49:19 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xa, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 256.501593][T12791] ? __fget_files+0x294/0x400 [ 256.506293][T12791] ? bpf_lsm_file_ioctl+0x5/0x10 [ 256.511233][T12791] ? dlci_ioctl_set+0x30/0x30 [ 256.515920][T12791] __x64_sys_ioctl+0x193/0x200 [ 256.520688][T12791] do_syscall_64+0x2d/0x70 [ 256.525144][T12791] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 256.531034][T12791] RIP: 0033:0x45d5f9 [ 256.534934][T12791] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 256.554538][T12791] RSP: 002b:00007f9d650ecc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.562951][T12791] RAX: ffffffffffffffda RBX: 000000000001e180 RCX: 000000000045d5f9 [ 256.571035][T12791] RDX: 0000000020000000 RSI: 00000000400448e1 RDI: 0000000000000004 [ 256.579009][T12791] RBP: 00007f9d650ecca0 R08: 0000000000000000 R09: 0000000000000000 [ 256.586989][T12791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 256.594970][T12791] R13: 00007fffda7f032f R14: 00007f9d650ed9c0 R15: 000000000118cf4c 04:49:19 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0xffffffff000) 04:49:19 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xb, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 256.994689][T12818] __nla_validate_parse: 13 callbacks suppressed [ 256.994700][T12818] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 257.129030][T12818] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 04:49:19 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r3, r1, &(0x7f0000000040), 0x22ea) 04:49:19 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xc, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:19 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 257.317321][T12836] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.347649][T12836] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x2, &(0x7f0000000000)) 04:49:20 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xe, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x5, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 257.536553][T12849] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.616413][T12849] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:20 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x10, &(0x7f0000000000)) 04:49:20 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x6, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x4c01, &(0x7f0000000000)) [ 257.927724][T12862] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x7, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 257.984308][T12862] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@remote={[], 0x2}, 0x5, 'bond_slave_0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:20 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x10, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:20 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x541b, &(0x7f0000000000)) 04:49:20 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x8, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 258.277400][T12882] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5421, &(0x7f0000000000)) 04:49:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xa, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 258.398996][T12882] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:21 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f0b000000fdffa6fffff7", @ANYRES32, @ANYBLOB="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"], 0x8d0}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@private1}, 0x14) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f00000001c0)=""/233, 0xe9}, {&(0x7f00000002c0)=""/76, 0x4c}, {&(0x7f0000000340)=""/128, 0x80}, {&(0x7f0000000a80)=""/59, 0x3b}], 0x5, &(0x7f0000000440)=""/250, 0xfa}, 0x7f}, {{&(0x7f0000000540)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/33, 0x21}, {&(0x7f0000000640)=""/32, 0x20}], 0x2}, 0x4}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/183, 0xb7}], 0x1}, 0x55e}], 0x3, 0x0, &(0x7f0000000940)={r1, r2+10000000}) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000980)={{0x5, 0x4}, 0x3c}, 0x10) r4 = socket$inet6(0xa, 0x803, 0x2) socket$inet6_dccp(0xa, 0x6, 0x0) r5 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x4e24, 0x0, 0xa}, {0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @multicast2}, 0x3f37}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) recvfrom(r4, &(0x7f00000009c0)=""/49, 0x31, 0x40002021, &(0x7f0000000a00)=@x25={0x9, @remote={[], 0x3}}, 0x80) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r6, r0, &(0x7f0000000040), 0x22ea) 04:49:21 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x11, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x48, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5450, &(0x7f0000000000)) 04:49:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5451, &(0x7f0000000000)) 04:49:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4c, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:21 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x60, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5452, &(0x7f0000000000)) 04:49:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x68, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:21 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:22 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5460, &(0x7f0000000000)) 04:49:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x6c, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:22 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x300, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x6364, &(0x7f0000000000)) 04:49:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x74, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:22 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x500, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x660c, &(0x7f0000000000)) 04:49:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x7a, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:22 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x600, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:22 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8901, &(0x7f0000000000)) 04:49:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @remote, 0x9}}}, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) r2 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, {0x0, 0x7}, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r2, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x6009000000000000) r3 = socket(0x5, 0x5, 0x7fffffff) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@netrom={'nr', 0x0}, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="01800002e9485715a34942e704256abc3e250000000000000000", @ANYRES16=r4, @ANYBLOB="000326bd7000fddbdf25016c2f000000080002000200000808000100000000000000d6bedaef34727d618707713c488565b1e2b73cec85d9e1777ebb712ef7b93e000e092cb17eda7f03fe51e9d4d2a0a39b9b3fe3ce38f641dfda2e9bb5d96f71789bb25022b7a9e7bceb717ce619b27af6e9a763f77404090200000027f803004a8e4b83af84a967b79d346d64ab2e2a8381365205d8b37c42e93b77455a41bc420e30c241cf3ea89c6bd6d665e3"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20040080) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x4}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004800}, 0x20004000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f00000005c0)={{0x1, 0x0, @identifier="00080000000000000000000600"}}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x9, 0x3, 0x2f8, 0x138, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x228, 0xffffffff, 0xffffffff, 0x228, 0xffffffff, 0x3, &(0x7f00000000c0), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x44}, @loopback, [0xff, 0xff000000, 0xffffffff, 0xff], [0xffffff00, 0x0, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'syzkaller0\x00', {0xff}, {}, 0x16, 0x9, 0x0, 0xa}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x1}}, @common=@hl={{0x28, 'hl\x00'}, {0x3, 0x80}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x1c, "6f3b09be6cbc6e185fe666a2c73bc68b84a7284d58301ad12e64f4bd3ef6"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x6, 0x7c, 'syz1\x00', {0xee}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000580), 0x4) 04:49:23 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfc, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8902, &(0x7f0000000000)) 04:49:23 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x900, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x3aa}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8, 0x8010, r1, 0x82f92000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r2, r0, &(0x7f0000000040), 0x22ea) 04:49:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x300, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8903, &(0x7f0000000000)) 04:49:23 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xa00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:23 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8904, &(0x7f0000000000)) 04:49:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x500, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:23 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xb00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:23 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x2000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x2, "59794f45367c3e91"}) r3 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f00000001c0)={0x7fffffff, 0x3, 0x6, 0x2, 0x9, 0x6087}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth1_to_batadv\x00', 0x200}) 04:49:24 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x600, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8906, &(0x7f0000000000)) 04:49:24 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xc00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:24 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8907, &(0x7f0000000000)) 04:49:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x700, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:24 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xe00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:24 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x25026000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000040)=0x1) sendfile(r2, r1, &(0x7f00000001c0), 0x22ea) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000000c0)=0x2, &(0x7f0000000140)=0x2) 04:49:24 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8914, &(0x7f0000000000)) [ 262.026959][T13054] __nla_validate_parse: 21 callbacks suppressed [ 262.026967][T13054] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xa00, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:24 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 262.259073][T13071] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.310371][T13071] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:25 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x891c, &(0x7f0000000000)) 04:49:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x204e, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:25 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x1100, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 262.712524][T13083] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x3f00, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8933, &(0x7f0000000000)) [ 262.815621][T13083] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) connect$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x8001, @any, 0x5, 0x2}, 0xe) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="95", 0x1}], 0x1) r3 = socket$inet6(0xa, 0x803, 0x2) r4 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x21dd, 0x5, 0x7f, 0x101}, {0x2, 0x8, 0x7f, 0x6}, {0x7, 0x6, 0xe1, 0x10001}]}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x20}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0xffbf, 0x10, 0xcd, 0x80000001}, &(0x7f00000003c0)=0xfffffffffffffde5) sendmmsg(r3, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000100)={0x4, 0x1, 0x3, 0x7fff, 0x79b7}, 0xc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0x22ea) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x18, &(0x7f0000000400)=0x7, 0x4) 04:49:25 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x3f00, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4800, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:25 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8940, &(0x7f0000000000)) [ 263.032963][T13103] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:25 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4c00, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 263.146149][T13103] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:26 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8941, &(0x7f0000000000)) 04:49:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:26 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x5865, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 263.674928][T13123] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x894c, &(0x7f0000000000)) 04:49:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x6800, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 263.756904][T13123] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:26 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x6000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000003070108000000000000009a54a32db300000000090c00064000000000000000ff0c000340000000000000080008020540000000020c0102400000000000000fff0002000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4008010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x4, 0x8}, 0xc) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000180)=r2, 0x4) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:26 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8980, &(0x7f0000000000)) 04:49:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x6c00, 0x0, @ipv4={[], [], @local}}, 0x1c) [ 264.035757][T13140] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:26 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x6558, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x7400, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:27 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8981, &(0x7f0000000000)) 04:49:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="95", 0x1}, {&(0x7f0000000140)="8b75bb3c59aae83b64c123185dcaba1f7d63153096d9850e38f6da76fee4bb663733f90c8145580cc4a7f4b31bc687dcab1b659ea255b07e67d43fdfd42b07e6376c954688d579b569e45dd949383f65a4cf2417f8c72fd1706951eb3ceffc13163df01db99b22a8e34160e0b98c3f24fb07f7d28c4247137c8a0295e6b81f228109c5c2e273adf672c06f20d22fb201feec69297165849c80c723da4c4d645c8a27ae8bd5afcc48fadf06906018", 0xae}, {&(0x7f0000000200)="45708974f42d50162d59c8dbaa90c724361e77365652326590b1d23ab8e65e4a805455255f9780e938b4c559e2e2e01db1ead81bb559b8830da1d8ff8e751c83dad1ccb1eef4edcf3c6c3ff5aa144c7eb1da06294f0ab830c81232b8f22e0a20a77aca4d823707b707ec9f79fccc00028339117742e9c12750273c4a69e828a4", 0x80}, {&(0x7f00000000c0)="124695f29f7661ae298b61d98b012445ed16e4c618d0eb7f8f57f7d4cb95ee", 0x1f}, {&(0x7f0000000280)="af11af8763ffc3cf3e6908d6dede7f39ecd046d2710f00207410468034e56133f3d52de5b360b5b9be047a56437405163c20d8b5a1a8eb03804afc80f0666893aa4d768f8fb2d3961e7ea095c1b707b07dca48c8b95b235a95df49c9becc94f83d539365b5d89b4fd51888db8ea6245ff3145933383befab5a585e37c5ad64eac816e831f972db37e39f68c0860086", 0x8f}], 0x5) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10012, r1, 0x5de8f000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r3, 0x0, 0x19404, 0x6009000000000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x83, &(0x7f0000000280)={r6}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000003c0)={r6, 0x29, "f65dee87cf2662d13ed01eda76805082504630ceb1b58b7ab43b762265c92ad5b2a69ad0f066d228d1"}, &(0x7f0000000400)=0x31) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r7, r0, &(0x7f0000000040), 0x22ea) 04:49:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x7a00, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:27 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x8100, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x80fe, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8982, &(0x7f0000000000)) 04:49:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:27 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xc0fe, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:27 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x8983, &(0x7f0000000000)) 04:49:27 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x34000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:28 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfc00, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000140)="2ef1c0346db9b7fcad8d42e86b3f34230c5edb2bfe92d96a100c5a02468d65991a43683681aef48fbfdd64c0ed55e978daa1a6d6eb6411bde23f588e48460888dadbe5e913edde63621e591d7c96092d3cef88acc8bdfb61a3933bd0f899135b98e76f39a5f3d9790863120eefb932d71d5d90dfbe0ca6f838d32e431c66c8427ae315419ea49ba1a8aa344342330d81964ae34cba6c423673c1582e0c8490e8b830ddaa747c5d594ab5fb9c9f1113a1a4f7cea05e4078e1b5cd1cfa89ad101f2788fbcc3e457a9f3d738542e28c7ed56aecc5b1e3ffda56bb0f065afcc4741757c3") 04:49:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x89a0, &(0x7f0000000000)) 04:49:28 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x400300, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfe80, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x89a1, &(0x7f0000000000)) 04:49:28 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf0ffff, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:28 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000000)) 04:49:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x83, &(0x7f0000000280)={r4}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r4, 0x4, 0x3f, 0x20, 0x3, 0xe0}, &(0x7f0000000140)=0x14) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:28 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfec0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:28 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x1000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:29 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xff00, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) close(r1) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x4) splice(r2, 0x0, r3, 0x0, 0x19404, 0x6009000000000000) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000e, 0x12, r2, 0x80000000) 04:49:29 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x2000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) 04:49:29 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f00000000c0)={{0x2, 0x0, @identifier="90233bb23789ea7c3267f80c6079e13f"}}) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:29 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x3000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x2, @ipv4={[], [], @local}}, 0x1c) 04:49:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)) 04:49:29 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x4000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x3, @ipv4={[], [], @local}}, 0x1c) [ 267.054004][T13287] __nla_validate_parse: 19 callbacks suppressed [ 267.054014][T13287] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:29 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000000)) [ 267.144780][T13287] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:30 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4, @ipv4={[], [], @local}}, 0x1c) 04:49:30 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x5000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, &(0x7f0000000000)) [ 267.574582][T13304] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x5, @ipv4={[], [], @local}}, 0x1c) 04:49:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000000)) [ 267.661824][T13304] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.683041][ T33] Bluetooth: hci1: command 0x0406 tx timeout [ 267.689122][ T33] Bluetooth: hci2: command 0x0406 tx timeout [ 267.742393][ T33] Bluetooth: hci3: command 0x0406 tx timeout [ 267.772288][ T33] Bluetooth: hci4: command 0x0406 tx timeout 04:49:30 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x6000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 267.789945][ T33] Bluetooth: hci5: command 0x0406 tx timeout 04:49:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6, @ipv4={[], [], @local}}, 0x1c) 04:49:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000000)) [ 267.894431][T13319] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.940315][T13319] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:30 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x8000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:30 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000000)) 04:49:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @ipv4={[], [], @local}}, 0x1c) [ 268.133541][T13332] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.198556][T13332] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:31 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:31 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x9000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x8, @ipv4={[], [], @local}}, 0x1c) 04:49:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e0, &(0x7f0000000000)) [ 268.566369][T13345] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)) 04:49:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xa, @ipv4={[], [], @local}}, 0x1c) [ 268.697180][T13345] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:31 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xa000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f0000000000)) 04:49:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x48, @ipv4={[], [], @local}}, 0x1c) 04:49:31 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e4, &(0x7f0000000000)) 04:49:31 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xb000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:31 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4c, @ipv4={[], [], @local}}, 0x1c) 04:49:32 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x0, 0x0}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400454ca, &(0x7f0000000000)) 04:49:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xc000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x68, @ipv4={[], [], @local}}, 0x1c) 04:49:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x40049409, &(0x7f0000000000)) 04:49:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xe000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6c, @ipv4={[], [], @local}}, 0x1c) 04:49:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x40087602, &(0x7f0000000000)) 04:49:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x74, @ipv4={[], [], @local}}, 0x1c) 04:49:32 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:32 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x40089413, &(0x7f0000000000)) 04:49:32 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7a, @ipv4={[], [], @local}}, 0x1c) 04:49:33 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:33 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x10000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x40186366, &(0x7f0000000000)) 04:49:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfc, @ipv4={[], [], @local}}, 0x1c) 04:49:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x401c5820, &(0x7f0000000000)) 04:49:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x300, @ipv4={[], [], @local}}, 0x1c) 04:49:33 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x11000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x500, @ipv4={[], [], @local}}, 0x1c) 04:49:33 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x20000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x4020940d, &(0x7f0000000000)) 04:49:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x600, @ipv4={[], [], @local}}, 0x1c) 04:49:33 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x40305829, &(0x7f0000000000)) 04:49:33 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:34 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x3f000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x700, @ipv4={[], [], @local}}, 0x1c) 04:49:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x40305839, &(0x7f0000000000)) 04:49:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{r0}, {@val, @max='max'}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x5000940e, &(0x7f0000000000)) 04:49:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xa00, @ipv4={[], [], @local}}, 0x1c) 04:49:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) socket$phonet(0x23, 0x2, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCPNGETOBJECT(r2, 0x89e0, &(0x7f0000000140)=0x6) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) connect$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100, 0x2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x81b, 0x3fc, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x20040080) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) r4 = openat$cgroup_ro(r0, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0xee01) 04:49:34 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x4f56f0e9, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000000)) 04:49:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x204e, @ipv4={[], [], @local}}, 0x1c) 04:49:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)) 04:49:34 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:34 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x60000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x3f00, @ipv4={[], [], @local}}, 0x1c) 04:49:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000000)) [ 272.259797][T13511] __nla_validate_parse: 20 callbacks suppressed [ 272.259807][T13511] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:34 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000000)) 04:49:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4800, @ipv4={[], [], @local}}, 0x1c) [ 272.387155][T13511] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x65580000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) [ 272.553008][ T28] audit: type=1800 audit(1600490975.193:93): pid=13498 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="pids.events" dev="sda1" ino=16375 res=0 errno=0 04:49:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, r0, &(0x7f0000000040), 0x22ea) 04:49:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80047456, &(0x7f0000000000)) 04:49:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4c00, @ipv4={[], [], @local}}, 0x1c) [ 272.597490][T13528] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.669006][T13528] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4e20, @ipv4={[], [], @local}}, 0x1c) 04:49:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80086301, &(0x7f0000000000)) 04:49:35 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:35 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x81000000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:35 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0), &(0x7f0000000180)=0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'erspan0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="6970e4a2dce6b0fa9372ac00", @ANYRES32=0x0, @ANYBLOB="0020070300000005000000094114008400640000012f9078ac141421e000000244101e800000000100000020000003ff44242873ffffffff800000010a010102000000047f00000100000100000000000000008144241c83ac14143c00000000ac1414bb00000002e00000020000000aac1e0001000003ff070fbbffffffffe000000164010101070727640101010000"]}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000002c0)={r2, 0x1, 0x6, @dev={[], 0x12}}, 0x10) 04:49:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6800, @ipv4={[], [], @local}}, 0x1c) 04:49:35 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80108906, &(0x7f0000000000)) [ 273.251100][T13554] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.355807][T13554] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80108907, &(0x7f0000000000)) 04:49:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6c00, @ipv4={[], [], @local}}, 0x1c) 04:49:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x67de3000) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:36 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x88a8ffff, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x801c581f, &(0x7f0000000000)) 04:49:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7400, @ipv4={[], [], @local}}, 0x1c) [ 273.658843][T13575] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002ec0)={r0}) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000002fc0)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x10023400}, 0xc, &(0x7f0000002f80)={&(0x7f0000002f40)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000800}, 0x0) getpeername(r0, &(0x7f0000000240)=@phonet, &(0x7f00000002c0)=0x80) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24009306f9ab01b521250000000000000000000708fc0440000000340800054000000020"], 0x24}, 0x1, 0x0, 0x0, 0x151}, 0x4000000) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x37cb1133) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0x10d0, 0x14, 0x800, 0x70bd25, 0x25dfdbfe, {0x25, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xb7, 0x1, "fd1c708c7f55278ea6ecc69ef771a6dc3df34e89656950c48a11d6c6cc09ad7a8a3effc9872c6ff566503c9f8df2fb2fa6b8863cd94c8bff873b1ea047e177a8c05399715869bfef2ce9fcc6d6cefb7ce068c94fe021934ed9520dff9fe6b42a6ce022ea8868305e225b8f34c1fcad11c2ee580b2ae2ea84edef733bfff6a4e07eaec928e870e610efe989dc32c9414f4f06ba36dbba58b9a7424432985d54898f1a683bfb6138f4e37a87d856845573f75c48"}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x400}, 0x4044005) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000001740)={0x16c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x84c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ba}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x6009000000000000) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendfile(r3, r0, &(0x7f0000000040), 0x22ea) [ 273.731575][T13575] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:36 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0045878, &(0x7f0000000000)) 04:49:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7a00, @ipv4={[], [], @local}}, 0x1c) 04:49:36 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x9effffff, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:36 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) [ 274.223533][T13595] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:36 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0045878, &(0x7f0000000000)) 04:49:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x80fe, @ipv4={[], [], @local}}, 0x1c) 04:49:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x1, 0x80, 0x3}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) [ 274.356320][T13595] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0185879, &(0x7f0000000000)) 04:49:37 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xe9f0564f, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc0fe, @ipv4={[], [], @local}}, 0x1c) 04:49:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc0189436, &(0x7f0000000000)) 04:49:37 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000280)={r3}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r3, 0xf2e0, 0x1ff, 0x200, 0x5, 0xafe5, 0x1, 0xf9, {0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2, 0xffffff81}}, 0x7, 0x2, 0x40000, 0x8000, 0x20}}, &(0x7f00000002c0)=0xb0) r4 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r4, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) splice(r4, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) sendfile(r5, r0, &(0x7f0000000040), 0x22ea) 04:49:37 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xf0ffffff, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfc00, @ipv4={[], [], @local}}, 0x1c) 04:49:37 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc020660b, &(0x7f0000000000)) 04:49:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfe80, @ipv4={[], [], @local}}, 0x1c) 04:49:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc028660f, &(0x7f0000000000)) 04:49:38 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xfcffffff, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xc400941b, &(0x7f0000000000)) 04:49:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfec0, @ipv4={[], [], @local}}, 0x1c) 04:49:38 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xffffa888, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:38 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x1, 0x40804) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @dev}, &(0x7f00000004c0)=0x20) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000003c0)=r1, 0x4) r2 = socket(0x1a, 0x1, 0x80) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000640)={0x2, 0x24, @status={[0x2, 0x0, 0x3, 0x3, 0x9, 0xffffffff]}, [0x3, 0x100, 0x4, 0xb5, 0x4, 0x7f, 0x1, 0xffffffffffffffff, 0x12, 0xeb36, 0x2, 0x6, 0x5, 0x4, 0x6, 0x7fffffff, 0x9, 0x80000001, 0x3, 0x2, 0x19ff6b5f, 0x3, 0x5f3e83be, 0x6, 0x1000, 0x1, 0x3, 0x10001, 0x3ff, 0x100, 0x7, 0x6, 0x9, 0x6, 0xeb5, 0x1, 0x8, 0x8059a, 0x3, 0x93e, 0x9949, 0x0, 0x2, 0x10001, 0x9, 0xfb, 0x6, 0x98, 0x7, 0x340a, 0xfffffffffffffff7, 0x5, 0x0, 0x9, 0x7, 0x9, 0x1000, 0x40, 0x1f, 0x2b12, 0x101, 0xfffffffffffffff9, 0x7fffffff, 0x4]}) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40032019}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x168, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x9c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb00}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf8a}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x169aded8}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000000}, 0x4812) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000340), &(0x7f0000000380)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r4, r3, &(0x7f0000000040), 0x22ea) 04:49:38 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:38 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0xd000943e, &(0x7f0000000000)) 04:49:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xff00, @ipv4={[], [], @local}}, 0x1c) 04:49:38 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xfffff000, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:39 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c011}, 0x8000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r1, 0x0, 0x19404, 0x6009000000000000) connect$can_j1939(r0, &(0x7f00000001c0)={0x1d, 0x0, 0x2, {0x1, 0x0, 0x4}, 0x1}, 0x18) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f0000000000)="24c9e5a42ee2b9d858fe023535470d13b22e2a9e284772101e01a6eddc436c81f3163bdaf4ca3cd55d070000000000000054de0e9541f395a1a534c4b7dc647c7ef4ba608cea95a616223026d303a90729ad4ed80f2e230a01029eace804d6b382b900") pread64(r3, &(0x7f0000000200)=""/185, 0xb9, 0x7) 04:49:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x1000000, @ipv4={[], [], @local}}, 0x1c) 04:49:39 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xffffff7f, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:39 executing program 4: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0x37cb1133) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000000)=""/4096, &(0x7f0000001000)=0x1000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000001040)={0x0, @adiantum}) 04:49:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x2000000, @ipv4={[], [], @local}}, 0x1c) 04:49:39 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xffffff9e, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) bind$ax25(r1, &(0x7f0000000140)={{0x3, @null, 0x4}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r2, r0, &(0x7f0000000040), 0x22ea) 04:49:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x3000000, @ipv4={[], [], @local}}, 0x1c) 04:49:39 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:39 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xfffffff0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="21fc16d386eaf194910536ee0f0ed7f11b1349084d6d0d4bd8a1bdc629a0c00a1f67b133cc8f72b5afaacdccf27c37cbc400", 0xfffffe70}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4000000, @ipv4={[], [], @local}}, 0x1c) 04:49:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x5000000, @ipv4={[], [], @local}}, 0x1c) [ 277.297710][T13730] __nla_validate_parse: 15 callbacks suppressed [ 277.297720][T13730] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:40 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xfffffffc, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6000000, @ipv4={[], [], @local}}, 0x1c) 04:49:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) [ 277.566347][T13745] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7000000, @ipv4={[], [], @local}}, 0x1c) [ 277.660835][T13745] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:40 executing program 4: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 04:49:40 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0xffffffff, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x8000000, @ipv4={[], [], @local}}, 0x1c) [ 277.912731][T13760] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.993271][T13760] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:40 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:40 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0x5e, 'NxU', 0x3, 0x9}) 04:49:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x300000c, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) close(r4) bind$inet(r4, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r2, 0x0, r4, 0x0, 0x19404, 0x6009000000000000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5d6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:40 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0xf, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:40 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xa000000, @ipv4={[], [], @local}}, 0x1c) [ 278.351277][T13774] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x204e0000, @ipv4={[], [], @local}}, 0x1c) [ 278.437871][T13774] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:41 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x10, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x3f000000, @ipv4={[], [], @local}}, 0x1c) [ 278.661735][T13788] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 278.744337][T13788] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x4000852, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:41 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x13, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x48000000, @ipv4={[], [], @local}}, 0x1c) 04:49:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) getpeername(r0, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000400)=0x80) sendmsg$can_bcm(r1, &(0x7f0000000540)={&(0x7f0000000440), 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0x6, 0x540, 0x7, {0x0, 0x2710}, {}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x2, 0x0, 0x1}, 0x13, 0x1, 0x0, 0x0, "7bbe4a4628253d161772e2a975520148ca9af0bde688fb925e9f4181cef65ef543a3bf143978d5ced5885e792ec029360a9f47183104f57c23e76e12de7bf0b2"}}, 0x80}, 0x1, 0x0, 0x0, 0x4005}, 0x40) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000000c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r2, r0, &(0x7f0000000040), 0x22ea) [ 279.001803][T13802] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 04:49:41 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x0, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:41 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 04:49:41 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0xc0, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:41 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x4c000000, @ipv4={[], [], @local}}, 0x1c) 04:49:42 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000740)={{0x29, @local, 0x4e21, 0x4, 'ovf\x00', 0x12, 0xfa3a, 0x6b}, {@loopback, 0x4e22, 0x2000, 0x7, 0x10000, 0x1}}, 0x44) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000240), &(0x7f00000007c0)=0x4) splice(r2, 0x0, r3, 0x0, 0x19404, 0x6009000000000000) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x9) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000800)={{0x2, 0x4e21, @loopback}, {0x1, @random="d38a55a1706c"}, 0x62, {0x2, 0x4e23, @local}, 'netdevsim0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d00800002400ffffff7f0b000000fdffa6fffff7", @ANYRES32=r5, @ANYBLOB="00000001f1ffffff000000000800010063627100a408020004040600030000000500000000700300fdffffffffff00001f0000000500000000020000010000000000100083000000fdffffff07000000084900000100000002000000cf000000feffffff080000000180000003000000090000000200000000274a49ef6949a7bb000000050000000100000004000000ff7f000000000000000400000002000004000000ff0f0000f44f350001000000010400005eb768350100000008000000ffffffffc38d00001f000000040008830600000000000100f7ffffff030000000080ffff050000000600000006000000a900000000000000c0000000c0ffffff08000000018000000101000006000000b300000000000020050000000104000004000000070000000800000001010000d0000000c0ffffff0500000004000000060000000900000008000000f7ffffff0800000003000000080000000400000001000080040000000400000000100000040000000700000009000000fcffffff01000000010000000900000000020000060e0000080000000200000002000000090000000800000007000000ab000000fb00000007000000ff0100000800000001040000070000000300000009000000ff07000008000000ffff0000a90100000900000005000000200000000500000001000000070000008eb7000000000080010000000000000007000000fffffffffcffffff01f0ffff000000003f00000003000000000100000080000000800000030000000000000005000000ffffffff0700000015ba000004000000070000000300000003000000ffffffff04000000554f00006ff800000700000003000000000200000600000008000000b300000006000000000000000007000001010000030000000080000000040000730a000001000080010000009e0c008000000000000000004000000000fefffff67d000004000000ff01000002000000000000024000000040000000ed000000010001000e0a05000000000000020000040000000600000002000000ff7f00000100000001000000060000007f000000020000000004000004000000090000009000000008000000b6000000040000000400000005000000f50a0000ffff0000060000008ff9ffff070000001eaaffff3f0000008000000000000000ff0c0000ff7f0000030000007f0000002d0000000800000000010000ff070000ffffffff2bab000002000000ace800000500000000000000e1bf934d070000001f000d000300000004000000070000000900000005000000030000000200000087d400000200000008000000000100007f0000000e000000080000000200000007000000ffffff7f06000000000000000500000001000000820000001f0000000004000001000000faffffff05000000060000000700000003000000100005"], 0x8d0}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x8000, 0x21, 0x3, 0xffffffc9, {{0x29, 0x4, 0x3, 0xd, 0xa4, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @empty, {[@noop, @noop, @lsrr={0x83, 0x1f, 0x45, [@private=0xa010102, @private=0xa010102, @multicast1, @loopback, @rand_addr=0x64010100, @multicast1, @empty]}, @generic={0x88, 0x6, "ca0c5bde"}, @timestamp_prespec={0x44, 0x34, 0x7e, 0x3, 0x7, [{@loopback, 0x7}, {@remote, 0x3ff}, {@multicast2, 0x2}, {@private=0xa010101, 0x2}, {@multicast1, 0x3}, {@rand_addr=0x64010101, 0x4}]}, @ssrr={0x89, 0x13, 0x62, [@private=0xa010100, @loopback, @multicast1, @empty]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x14, [@broadcast, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}]}, @ra={0x94, 0x4}]}}}}}) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:42 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0xec0, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:42 executing program 4: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1000, 0x101, 0x8983, 0xfd}, 0x14) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000000)="8cfad1a5f300c711774d258f3c844000cae7e5674db45ad96cea23159cfe45df582d53d8") 04:49:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x68000000, @ipv4={[], [], @local}}, 0x1c) 04:49:42 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r2 = openat$cgroup(r1, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) writev(r4, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x83, &(0x7f0000000280)={r7}, &(0x7f00000002c0)=0x18) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000880)={r7, @in={{0x2, 0x4e21, @local}}}, 0x84) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="8801050048f086afbe18ffe0c37bed4fca628cb83d640a8fdc681b9678cec3cf7c46aa65f9fe1d48cab1cf1b97a76353e1ff51eeb56e6b5f539493dbceb65ac3875f8c7388759c98872f26ba0ebaf4641dbe0589dd582304b94c15ce6d7ab53a1294f2c0d98b8ccd3d85de54281b0f37895aba0409e62b29c85f74e27f48564797268d191f97bac2da869d411ed5baa2243d03ad", @ANYRES16=0x0, @ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x8004) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r8, r4, &(0x7f0000000040), 0x22ea) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r9, &(0x7f0000000140)=ANY=[], 0x37cb1133) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x1, 0x236, [0x20000380, 0x0, 0x0, 0x200003b0, 0x200003e0], 0x0, &(0x7f0000000180), &(0x7f0000000380)=[{}, {0x0, '\x00', 0x0, 0x2}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x11, 0x39, 0x6006, 'rose0\x00', 'veth1_to_team\x00', 'vlan0\x00', 'ipvlan0\x00', @local, [0x0, 0xff, 0x0, 0x0, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x106, 0x13e, 0x176, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'sip-20000\x00'}}}, @limit={{'limit\x00', 0x0, 0x20}, {{0x0, 0x80, 0x1, 0x2, 0x2000, 0x5}}}], [@arpreply={'arpreply\x00', 0x10, {{@remote, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffe}}}}]}]}, 0x2ae) 04:49:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x6c000000, @ipv4={[], [], @local}}, 0x1c) 04:49:42 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x33fe0, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:42 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e1, &(0x7f0000000000)) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, &(0x7f0000000000)="5b382f3570c19e66eaac96a6babc035885905b5a42445e4c635c01e9ef516e4e3dd007586b58caba953aa6d239aa91228f35612868a1aeb77fa89304e7bc35094a78044311ee56e0f783ef90a7191fc86d15a6e70b94da82d602cf4811898624298f495e37db8f118d56536b14c22ced38a614b74c7d7a2e332e0276d2431e91c33dac15b4b4713a421d57fee736f68a6785b2ca105efac310791da8e4b21589c854ddce407d2b82b93a2f21c95516353dd4b2366c4c99e12762de2bf4dfa1303ca191f34d5f6cd580e7f612b6df11f28b68a6579c173d6c8ff05557a0078db08fe3b8") 04:49:42 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x0, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:42 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x20000868, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x74000000, @ipv4={[], [], @local}}, 0x1c) 04:49:42 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@sco={0x1f, @fixed}, &(0x7f0000000080)=0x80, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xaa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x28}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.state\x00', 0x0, 0x0) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x1bc}, 0xf7, 0x36, 0x2, 0x678d, 0x5, 'syz0\x00', "df388251ff577c578ff52bd34a1cd0b6ee169621f4e46e1774650faa2a17c9e2", "e98b200daf67e82fbeb751adc05d8e827043cc5534f35fe54949f9b9c01341d9", [{0x7c7, 0x7, {0x1, 0x1f8}}, {0x6cbb, 0x20, {0x0, 0x1}}, {0xfffc, 0x4, {0x2}}, {0x5}, {0x100, 0x7, {0x2, 0x7ff}}, {0x4, 0x81, {0x2, 0xed27}}, {0x8, 0x6, {0x1, 0xe5}}, {0xb87e, 0x878, {0x3, 0x80000000}}, {0x8, 0x3, {0x3, 0x101}}, {0x6, 0x8, {0x0, 0x20}}, {0x82, 0x8b3, {0x3}}, {0x80, 0x3, {0x3, 0x5}}, {0xbe7, 0x9, {0x1, 0xe9b2}}, {0x81, 0x4, {0x2, 0x53d}}, {0x7, 0x7ff, {0x3, 0x5}}, {0x7d0, 0x2f2, {0x1, 0xdd7}}, {0x7f, 0x81, {0x2, 0x1}}, {0x2, 0x3, {0x1, 0xfffffffa}}, {0x3, 0x3, {0x1, 0x9}}, {0x8, 0x8, {0x2, 0x100}}, {0xfffa, 0xffff, {0x2, 0x9}}, {0x5, 0x200, {0x2, 0x47}}, {0x7fff, 0x52, {0x1, 0x7fff}}, {0xf213, 0x7, {0x1, 0x8}}, {0x2, 0x81, {0x1, 0x800}}, {0x0, 0x2, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0xffff}}, {0xff, 0x101, {0x2, 0xffffff80}}, {0x80, 0x9, {0x1, 0x2}}, {0x8, 0x100, {0x1, 0x101}}, {0x1, 0xfffc, {0x3, 0xa35c}}, {0x5, 0x1, {0x3, 0x7}}, {0x5, 0x2, {0x2, 0x5}}, {0x97, 0xae69, {0x1}}, {0x8, 0x8, {0x1, 0x80000000}}, {0xff, 0x1, {0x3, 0x1}}, {0x20, 0x4}, {0x3ff, 0x1, {0x0, 0x6}}, {0x0, 0x3, {0x8dfb2ba5abfd510b, 0x2}}, {0x22, 0x6, {0x3, 0x4}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$sock_bt_hci(r2, 0x400448e1, &(0x7f0000000000)) 04:49:42 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r4, 0x21, 0x0, &(0x7f0000000080)=0xfbfffffb, 0x4) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000140)={0x5, &(0x7f0000000040)=[{0x8000, 0x4, 0x7, 0x3ff}, {0x8, 0x8, 0xa2, 0x20}, {0xe2ef, 0x8, 0x2, 0x9}, {0x4, 0xfe, 0x3f, 0x8}, {0x40, 0x20, 0x4}]}) close(r3) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19404, 0x6009000000000000) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000000)="f7e90468a4fcca4921d43917ac5c983722ce676c71fe34a9a29cf2bcf31a4cbdc8dc4dd12d64b420ffc85c588bc582c41e467369ad88bbe12d7f15ca6842fdf7") ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 04:49:42 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x7ffff000, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7a000000, @ipv4={[], [], @local}}, 0x1c) [ 280.319629][ T33] Bluetooth: hci4: command 0x0401 tx timeout 04:49:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfc000000, @ipv4={[], [], @local}}, 0x1c) 04:49:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) r1 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x4, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0, 0x0, 0x0, 0x0, 0x7}}], 0x400000000000107, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)={0x0, 0x1, 0x10001, 0x200, 0x8}) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x4d4001, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) sendfile(r2, r0, &(0x7f0000000040), 0x22ea) 04:49:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000140)="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") 04:49:43 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0xfffffdef, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfe800000, @ipv4={[], [], @local}}, 0x1c) 04:49:43 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x0, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:43 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 04:49:43 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0xf, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfec00000, @ipv4={[], [], @local}}, 0x1c) 04:49:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) accept$alg(r1, 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x4a1bc000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r2, r0, &(0x7f0000000040), 0x40022ea) 04:49:43 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfeffffff, @ipv4={[], [], @local}}, 0x1c) 04:49:43 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=ANY=[@ANYBLOB="9800000030003b050000e600000000000000000084000100500001000d000100636f6e6e6d61726b00000000200002801c000100010000000000000000000000000000008a5f3a1c12078e30040006000c00070000000000000000000c000800000000000000000030000200090001"], 0x98}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000800)=@newtaction={0x68, 0x31, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 04:49:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x81, 0x1}}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'batadv_slave_1\x00'}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4044005) sendfile(r1, r0, &(0x7f0000000040), 0x22ea) 04:49:44 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x100, &(0x7f0000000040)=0x4) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000000)) 04:49:44 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xff000000, @ipv4={[], [], @local}}, 0x1c) [ 281.534875][T13932] ================================================================== [ 281.543263][T13932] BUG: KASAN: use-after-free in tcf_action_destroy+0x188/0x1b0 [ 281.550805][T13932] Read of size 8 at addr ffff8880a0f91000 by task syz-executor.3/13932 [ 281.559042][T13932] [ 281.561379][T13932] CPU: 1 PID: 13932 Comm: syz-executor.3 Not tainted 5.9.0-rc3-syzkaller #0 [ 281.570045][T13932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.580092][T13932] Call Trace: [ 281.583390][T13932] dump_stack+0x198/0x1fd [ 281.587739][T13932] ? tcf_action_destroy+0x188/0x1b0 [ 281.592956][T13932] ? tcf_action_destroy+0x188/0x1b0 [ 281.598167][T13932] print_address_description.constprop.0.cold+0xae/0x497 [ 281.605197][T13932] ? tcf_action_destroy+0x188/0x1b0 [ 281.610396][T13932] ? lockdep_hardirqs_off+0x96/0xd0 [ 281.615612][T13932] ? vprintk_func+0x95/0x1d4 [ 281.620224][T13932] ? tcf_action_destroy+0x188/0x1b0 [ 281.625421][T13932] ? tcf_action_destroy+0x188/0x1b0 [ 281.630621][T13932] kasan_report.cold+0x1f/0x37 [ 281.635400][T13932] ? tcf_action_destroy+0x188/0x1b0 [ 281.640604][T13932] tcf_action_destroy+0x188/0x1b0 [ 281.645639][T13932] tcf_action_init+0x29c/0x3d0 [ 281.650417][T13932] ? tcf_action_init_1+0xac0/0xac0 [ 281.655580][T13932] tcf_action_add+0xd9/0x360 [ 281.660196][T13932] ? tca_action_gd+0xe20/0xe20 [ 281.664966][T13932] ? lock_acquire+0x1f3/0xae0 [ 281.669674][T13932] ? bpf_lsm_capable+0x5/0x10 [ 281.674382][T13932] ? __nla_parse+0x3d/0x4a [ 281.678810][T13932] tc_ctl_action+0x33a/0x439 [ 281.683406][T13932] ? tcf_action_add+0x360/0x360 [ 281.688296][T13932] ? lock_is_held_type+0xbb/0xf0 [ 281.693240][T13932] ? tcf_action_add+0x360/0x360 [ 281.698115][T13932] rtnetlink_rcv_msg+0x44e/0xad0 [ 281.703058][T13932] ? rtnetlink_put_metrics+0x510/0x510 [ 281.708529][T13932] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 281.713822][T13932] ? lock_is_held_type+0xbb/0xf0 [ 281.718766][T13932] netlink_rcv_skb+0x15a/0x430 [ 281.723562][T13932] ? rtnetlink_put_metrics+0x510/0x510 [ 281.729030][T13932] ? netlink_ack+0xa10/0xa10 [ 281.733644][T13932] netlink_unicast+0x533/0x7d0 [ 281.738425][T13932] ? netlink_attachskb+0x810/0x810 [ 281.743541][T13932] ? __phys_addr_symbol+0x2c/0x70 [ 281.748565][T13932] ? __check_object_size+0x171/0x3e4 [ 281.753869][T13932] netlink_sendmsg+0x856/0xd90 [ 281.758647][T13932] ? netlink_unicast+0x7d0/0x7d0 [ 281.763595][T13932] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 281.768885][T13932] ? netlink_unicast+0x7d0/0x7d0 [ 281.773828][T13932] sock_sendmsg+0xcf/0x120 [ 281.778247][T13932] ____sys_sendmsg+0x6e8/0x810 [ 281.783035][T13932] ? kernel_sendmsg+0x50/0x50 [ 281.787715][T13932] ? do_recvmmsg+0x6d0/0x6d0 [ 281.792319][T13932] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 281.798308][T13932] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 281.804286][T13932] ? __lock_acquire+0xb92/0x5780 [ 281.809232][T13932] ___sys_sendmsg+0xf3/0x170 [ 281.813838][T13932] ? sendmsg_copy_msghdr+0x160/0x160 [ 281.819124][T13932] ? __fget_files+0x272/0x400 [ 281.823805][T13932] ? lock_downgrade+0x830/0x830 [ 281.828656][T13932] ? find_held_lock+0x2d/0x110 [ 281.833444][T13932] ? __fget_files+0x294/0x400 [ 281.838135][T13932] ? __fget_light+0xea/0x280 [ 281.842735][T13932] __sys_sendmsg+0xe5/0x1b0 [ 281.847259][T13932] ? __sys_sendmsg_sock+0xb0/0xb0 [ 281.852305][T13932] ? syscall_enter_from_user_mode+0x20/0x290 [ 281.858293][T13932] ? lockdep_hardirqs_on+0x53/0x100 [ 281.863499][T13932] do_syscall_64+0x2d/0x70 [ 281.867917][T13932] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 281.873809][T13932] RIP: 0033:0x45d5f9 [ 281.877708][T13932] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 281.897312][T13932] RSP: 002b:00007f6416c1dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.905724][T13932] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5f9 [ 281.913696][T13932] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 281.921686][T13932] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 281.929688][T13932] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 281.937666][T13932] R13: 00007ffd5e7d5a1f R14: 00007f6416c1e9c0 R15: 000000000118cf4c [ 281.945648][T13932] [ 281.947974][T13932] Allocated by task 13932: [ 281.952392][T13932] kasan_save_stack+0x1b/0x40 [ 281.957072][T13932] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 281.962706][T13932] __kmalloc+0x1b0/0x360 [ 281.966950][T13932] tcf_idr_create+0x5b/0x800 [ 281.971542][T13932] tcf_connmark_init+0x535/0x960 [ 281.976474][T13932] tcf_action_init_1+0x6a5/0xac0 [ 281.981407][T13932] tcf_action_init+0x260/0x3d0 [ 281.986166][T13932] tcf_action_add+0xd9/0x360 [ 281.990772][T13932] tc_ctl_action+0x33a/0x439 [ 281.995359][T13932] rtnetlink_rcv_msg+0x44e/0xad0 [ 282.000292][T13932] netlink_rcv_skb+0x15a/0x430 [ 282.005047][T13932] netlink_unicast+0x533/0x7d0 [ 282.009806][T13932] netlink_sendmsg+0x856/0xd90 [ 282.014566][T13932] sock_sendmsg+0xcf/0x120 [ 282.018981][T13932] ____sys_sendmsg+0x6e8/0x810 [ 282.023743][T13932] ___sys_sendmsg+0xf3/0x170 [ 282.028342][T13932] __sys_sendmsg+0xe5/0x1b0 [ 282.032841][T13932] do_syscall_64+0x2d/0x70 [ 282.037259][T13932] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 282.043137][T13932] [ 282.045457][T13932] Freed by task 13937: [ 282.049526][T13932] kasan_save_stack+0x1b/0x40 [ 282.054214][T13932] kasan_set_track+0x1c/0x30 [ 282.058805][T13932] kasan_set_free_info+0x1b/0x30 [ 282.063843][T13932] __kasan_slab_free+0xd8/0x120 [ 282.068690][T13932] kfree+0x10e/0x2b0 [ 282.072586][T13932] tcf_generic_walker+0x959/0xb60 [ 282.077612][T13932] tca_action_flush+0x42b/0x920 [ 282.082459][T13932] tca_action_gd+0x8c9/0xe20 [ 282.087049][T13932] tc_ctl_action+0x280/0x439 [ 282.091641][T13932] rtnetlink_rcv_msg+0x44e/0xad0 [ 282.096582][T13932] netlink_rcv_skb+0x15a/0x430 [ 282.101345][T13932] netlink_unicast+0x533/0x7d0 [ 282.106111][T13932] netlink_sendmsg+0x856/0xd90 [ 282.110870][T13932] sock_sendmsg+0xcf/0x120 [ 282.115281][T13932] ____sys_sendmsg+0x6e8/0x810 [ 282.120039][T13932] ___sys_sendmsg+0xf3/0x170 [ 282.124622][T13932] __sys_sendmsg+0xe5/0x1b0 [ 282.129125][T13932] do_syscall_64+0x2d/0x70 [ 282.133545][T13932] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 282.139424][T13932] [ 282.141750][T13932] The buggy address belongs to the object at ffff8880a0f91000 [ 282.141750][T13932] which belongs to the cache kmalloc-512 of size 512 [ 282.155797][T13932] The buggy address is located 0 bytes inside of [ 282.155797][T13932] 512-byte region [ffff8880a0f91000, ffff8880a0f91200) [ 282.168882][T13932] The buggy address belongs to the page: [ 282.174517][T13932] page:000000006737ac54 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880a0f91800 pfn:0xa0f91 [ 282.185962][T13932] flags: 0xfffe0000000200(slab) [ 282.190816][T13932] raw: 00fffe0000000200 ffffea00023abc08 ffffea000277aa88 ffff8880aa040600 [ 282.199406][T13932] raw: ffff8880a0f91800 ffff8880a0f91000 0000000100000002 0000000000000000 [ 282.207977][T13932] page dumped because: kasan: bad access detected [ 282.214376][T13932] [ 282.216715][T13932] Memory state around the buggy address: [ 282.222347][T13932] ffff8880a0f90f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 282.230405][T13932] ffff8880a0f90f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 282.238463][T13932] >ffff8880a0f91000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.246515][T13932] ^ [ 282.250582][T13932] ffff8880a0f91080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.258697][T13932] ffff8880a0f91100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 282.266756][T13932] ================================================================== [ 282.274811][T13932] Disabling lock debugging due to kernel taint 04:49:44 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={[], [], @local}}, 0x1c) 04:49:44 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20}, {0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000e228, 0x0) 04:49:45 executing program 4: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x7fffffff, 0xffffffffffff5760}) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000000)) 04:49:45 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f0000000580)) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x19404, 0x6009000000000000) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000100)="95", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) recvmsg$can_raw(r1, &(0x7f00000004c0)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000340)=""/149, 0x95}], 0x3, &(0x7f0000000440)=""/70, 0x46}, 0x10040) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x83, &(0x7f0000000280)={r7}, &(0x7f00000002c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000500)={0x2, 0x20e, 0x20, 0xfffffe01, r7}, &(0x7f0000000540)=0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x4d4001, 0x0) sendfile(r8, r3, &(0x7f0000000040), 0x22ea) [ 282.398856][ T8700] Bluetooth: hci4: command 0x080f tx timeout [ 282.451846][T13932] Kernel panic - not syncing: panic_on_warn set ... [ 282.458474][T13932] CPU: 1 PID: 13932 Comm: syz-executor.3 Tainted: G B 5.9.0-rc3-syzkaller #0 [ 282.468518][T13932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.478580][T13932] Call Trace: [ 282.481869][T13932] dump_stack+0x198/0x1fd [ 282.486203][T13932] ? tcf_action_destroy+0xc0/0x1b0 [ 282.491329][T13932] panic+0x382/0x7fb [ 282.495219][T13932] ? __warn_printk+0xf3/0xf3 [ 282.499802][T13932] ? preempt_schedule_common+0x59/0xc0 [ 282.505254][T13932] ? tcf_action_destroy+0x188/0x1b0 [ 282.510453][T13932] ? preempt_schedule_thunk+0x16/0x18 [ 282.515818][T13932] ? trace_hardirqs_on+0x55/0x220 [ 282.520836][T13932] ? tcf_action_destroy+0x188/0x1b0 [ 282.526029][T13932] ? tcf_action_destroy+0x188/0x1b0 [ 282.531220][T13932] end_report+0x4d/0x53 [ 282.535367][T13932] kasan_report.cold+0xd/0x37 [ 282.540032][T13932] ? tcf_action_destroy+0x188/0x1b0 [ 282.545220][T13932] tcf_action_destroy+0x188/0x1b0 [ 282.550232][T13932] tcf_action_init+0x29c/0x3d0 [ 282.554989][T13932] ? tcf_action_init_1+0xac0/0xac0 [ 282.560108][T13932] tcf_action_add+0xd9/0x360 [ 282.564711][T13932] ? tca_action_gd+0xe20/0xe20 [ 282.569485][T13932] ? lock_acquire+0x1f3/0xae0 [ 282.574163][T13932] ? bpf_lsm_capable+0x5/0x10 [ 282.578835][T13932] ? __nla_parse+0x3d/0x4a [ 282.583244][T13932] tc_ctl_action+0x33a/0x439 [ 282.587828][T13932] ? tcf_action_add+0x360/0x360 [ 282.592680][T13932] ? lock_is_held_type+0xbb/0xf0 [ 282.597612][T13932] ? tcf_action_add+0x360/0x360 [ 282.602458][T13932] rtnetlink_rcv_msg+0x44e/0xad0 [ 282.607393][T13932] ? rtnetlink_put_metrics+0x510/0x510 [ 282.612849][T13932] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 282.618123][T13932] ? lock_is_held_type+0xbb/0xf0 [ 282.623056][T13932] netlink_rcv_skb+0x15a/0x430 [ 282.627815][T13932] ? rtnetlink_put_metrics+0x510/0x510 [ 282.633283][T13932] ? netlink_ack+0xa10/0xa10 [ 282.637888][T13932] netlink_unicast+0x533/0x7d0 [ 282.642650][T13932] ? netlink_attachskb+0x810/0x810 [ 282.647757][T13932] ? __phys_addr_symbol+0x2c/0x70 [ 282.652778][T13932] ? __check_object_size+0x171/0x3e4 [ 282.658061][T13932] netlink_sendmsg+0x856/0xd90 [ 282.662827][T13932] ? netlink_unicast+0x7d0/0x7d0 [ 282.667761][T13932] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 282.673042][T13932] ? netlink_unicast+0x7d0/0x7d0 [ 282.677978][T13932] sock_sendmsg+0xcf/0x120 [ 282.682391][T13932] ____sys_sendmsg+0x6e8/0x810 [ 282.687152][T13932] ? kernel_sendmsg+0x50/0x50 [ 282.691823][T13932] ? do_recvmmsg+0x6d0/0x6d0 [ 282.696409][T13932] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 282.702384][T13932] ? lockdep_hardirqs_on_prepare+0x530/0x530 [ 282.708359][T13932] ? __lock_acquire+0xb92/0x5780 [ 282.713292][T13932] ___sys_sendmsg+0xf3/0x170 [ 282.717880][T13932] ? sendmsg_copy_msghdr+0x160/0x160 [ 282.723162][T13932] ? __fget_files+0x272/0x400 [ 282.727837][T13932] ? lock_downgrade+0x830/0x830 [ 282.732681][T13932] ? find_held_lock+0x2d/0x110 [ 282.737444][T13932] ? __fget_files+0x294/0x400 [ 282.742144][T13932] ? __fget_light+0xea/0x280 [ 282.746762][T13932] __sys_sendmsg+0xe5/0x1b0 [ 282.751261][T13932] ? __sys_sendmsg_sock+0xb0/0xb0 [ 282.756282][T13932] ? syscall_enter_from_user_mode+0x20/0x290 [ 282.762286][T13932] ? lockdep_hardirqs_on+0x53/0x100 [ 282.767479][T13932] do_syscall_64+0x2d/0x70 [ 282.771895][T13932] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 282.777777][T13932] RIP: 0033:0x45d5f9 [ 282.781672][T13932] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.801265][T13932] RSP: 002b:00007f6416c1dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.809669][T13932] RAX: ffffffffffffffda RBX: 000000000002cf40 RCX: 000000000045d5f9 [ 282.817630][T13932] RDX: 0000000000000000 RSI: 0000000020002980 RDI: 0000000000000003 [ 282.825592][T13932] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 282.833554][T13932] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 282.841521][T13932] R13: 00007ffd5e7d5a1f R14: 00007f6416c1e9c0 R15: 000000000118cf4c [ 282.850859][T13932] Kernel Offset: disabled [ 282.855178][T13932] Rebooting in 86400 seconds..