abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) shutdown(r1, 0x0) 06:59:58 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) shutdown(r1, 0x0) 06:59:58 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) shutdown(r1, 0x0) 06:59:58 executing program 4: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) shutdown(r1, 0x0) 06:59:58 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) shutdown(r1, 0x0) 06:59:58 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) shutdown(r1, 0x0) 06:59:59 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) shutdown(r1, 0x0) 06:59:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 06:59:59 executing program 5: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) shutdown(r1, 0x0) [ 227.683137][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 06:59:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 06:59:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 228.046781][ T8592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.287269][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:00:00 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) shutdown(r1, 0x0) 07:00:00 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:00 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:00 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 228.979498][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 07:00:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 229.285953][ T8612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 07:00:01 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 229.494657][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 07:00:01 executing program 3: socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r1, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x40000121, 0x0) shutdown(r1, 0x0) [ 229.682235][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.972722][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:00:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 230.795410][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 07:00:02 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:02 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 231.053995][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 07:00:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:03 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:04 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:04 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:04 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:04 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 232.745035][ T8670] __nla_validate_parse: 5 callbacks suppressed [ 232.745053][ T8670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 232.994295][ T8675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 233.222085][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:00:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 233.423682][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.634254][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:00:05 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 234.355409][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 07:00:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 234.691170][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 234.798566][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 07:00:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 234.983647][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.310637][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 07:00:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:07 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 237.867649][ T8754] __nla_validate_parse: 10 callbacks suppressed [ 237.867668][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.170160][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:00:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 238.767640][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 238.767657][ T27] audit: type=1804 audit(1678431610.556:81): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/122/memory.events" dev="sda1" ino=1152 res=1 errno=0 [ 238.908876][ T27] audit: type=1800 audit(1678431610.556:82): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=1152 res=0 errno=0 07:00:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 239.010740][ T27] audit: type=1804 audit(1678431610.556:83): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/122/memory.events" dev="sda1" ino=1152 res=1 errno=0 [ 239.138730][ T27] audit: type=1804 audit(1678431610.786:84): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir65001798/syzkaller.FxxHx5/127/memory.events" dev="sda1" ino=1171 res=1 errno=0 [ 239.324413][ T27] audit: type=1800 audit(1678431610.786:85): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1171 res=0 errno=0 07:00:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 239.366718][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.437964][ T27] audit: type=1804 audit(1678431610.796:86): pid=8771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir65001798/syzkaller.FxxHx5/127/memory.events" dev="sda1" ino=1171 res=1 errno=0 [ 239.575364][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.805370][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.882696][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:00:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) [ 240.203844][ T27] audit: type=1804 audit(1678431611.996:87): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/123/memory.events" dev="sda1" ino=1165 res=1 errno=0 07:00:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) [ 240.401465][ T27] audit: type=1800 audit(1678431612.026:88): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=1165 res=0 errno=0 07:00:12 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 240.511954][ T27] audit: type=1804 audit(1678431612.036:89): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/123/memory.events" dev="sda1" ino=1165 res=1 errno=0 07:00:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) [ 240.611284][ T27] audit: type=1804 audit(1678431612.256:90): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir65001798/syzkaller.FxxHx5/128/memory.events" dev="sda1" ino=1171 res=1 errno=0 [ 240.818492][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 07:00:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) 07:00:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) pipe(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012062, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003140)={r0, 0x20, &(0x7f0000003100)={0x0, 0x0, 0x0, &(0x7f0000003000)=""/243, 0xf3}}, 0x10) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003280)={&(0x7f0000003240)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="ef94bf49b4dbbff3f49a646b95000000ff0f97980783331b41e33806726de4ef460ddcf06c5828c795"], &(0x7f0000002e80)='syzkaller\x00', 0xa0000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000002f00)={0x5, 0x8, 0x7, 0x4a2}, 0x10, 0x0, r3, 0x0, &(0x7f0000003180)=[r0]}, 0x80) r4 = socket(0x840000000002, 0x3, 0x100) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) sendfile(r7, r8, 0x0, 0xf03b2b00) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0) connect$can_bcm(r6, &(0x7f0000000100)={0x1d, r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000045c0)={0x1e, 0x9, &(0x7f00000032c0)=@raw=[@ldst={0x0, 0x0, 0x6, 0xb}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @jmp={0x5, 0x1, 0x4, 0x4, 0x6, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x55}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2968}], &(0x7f0000003340)='syzkaller\x00', 0x46e, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000004500)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000004540)={0x1, 0x1, 0x5, 0x2}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000004580)}, 0x80) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev}, 0x2b) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8b}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x1a0}}, 0x0) [ 241.273457][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.412559][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 07:00:13 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:13 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:13 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:14 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:14 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:14 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) 07:00:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) [ 243.046640][ T8849] team0: entered promiscuous mode [ 243.067588][ T8849] team_slave_0: entered promiscuous mode [ 243.100891][ T8849] team_slave_1: entered promiscuous mode 07:00:14 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) [ 243.128171][ T8848] team0: left promiscuous mode [ 243.144836][ T8848] team_slave_0: left promiscuous mode [ 243.161086][ T8848] team_slave_1: left promiscuous mode 07:00:15 executing program 3: socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x60000200) [ 243.333406][ T8855] team0: entered promiscuous mode [ 243.338518][ T8855] team_slave_0: entered promiscuous mode [ 243.371747][ T8855] team_slave_1: entered promiscuous mode 07:00:15 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) [ 243.420689][ T8854] team0: left promiscuous mode [ 243.432037][ T8854] team_slave_0: left promiscuous mode [ 243.446716][ T8854] team_slave_1: left promiscuous mode 07:00:15 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @multicast}, 0x10) [ 243.622355][ T8862] team0: entered promiscuous mode [ 243.627533][ T8862] team_slave_0: entered promiscuous mode [ 243.672271][ T8862] team_slave_1: entered promiscuous mode [ 243.681738][ T8861] team0: left promiscuous mode [ 243.696269][ T8861] team_slave_0: left promiscuous mode 07:00:15 executing program 3: socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x60000200) [ 243.768589][ T8861] team_slave_1: left promiscuous mode 07:00:15 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xe}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:00:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:15 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xe}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 244.016022][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 244.016038][ T27] audit: type=1804 audit(1678431615.806:129): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir776656121/syzkaller.vDkoon/119/memory.events" dev="sda1" ino=1175 res=1 errno=0 [ 244.147197][ T27] audit: type=1800 audit(1678431615.806:130): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1175 res=0 errno=0 [ 244.229349][ T27] audit: type=1804 audit(1678431615.816:131): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir776656121/syzkaller.vDkoon/119/memory.events" dev="sda1" ino=1175 res=1 errno=0 07:00:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:16 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xe}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 07:00:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0xbfb, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) [ 244.290132][ T27] audit: type=1804 audit(1678431615.836:132): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2742128074/syzkaller.4oHC0x/116/memory.events" dev="sda1" ino=1180 res=1 errno=0 07:00:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0xbfb, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) 07:00:16 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0xe}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 244.377186][ T27] audit: type=1800 audit(1678431615.836:133): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1180 res=0 errno=0 07:00:16 executing program 3: socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x10) socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x60000200) 07:00:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0xbfb, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) 07:00:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0xbfb, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) [ 244.501967][ T27] audit: type=1804 audit(1678431615.836:134): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2742128074/syzkaller.4oHC0x/116/memory.events" dev="sda1" ino=1180 res=1 errno=0 07:00:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0xbfb, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) [ 244.623514][ T27] audit: type=1804 audit(1678431616.226:135): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/126/memory.events" dev="sda1" ino=1163 res=1 errno=0 [ 244.774499][ T27] audit: type=1800 audit(1678431616.226:136): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=1163 res=0 errno=0 [ 244.892713][ T27] audit: type=1804 audit(1678431616.236:137): pid=8885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/126/memory.events" dev="sda1" ino=1163 res=1 errno=0 07:00:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:16 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) close(r0) 07:00:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0xbfb, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) 07:00:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000100)=0xbfb, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000040)) 07:00:16 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:16 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x8, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback, 0x3}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x190) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) r3 = socket$kcm(0x29, 0x1000000000002, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xae) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100080737) sendfile(r3, r1, 0x0, 0x100000004) write$binfmt_script(r3, 0x0, 0x0) 07:00:17 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) close(r0) 07:00:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) close(r0) [ 245.240326][ T27] audit: type=1804 audit(1678431617.026:138): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/127/memory.events" dev="sda1" ino=1156 res=1 errno=0 07:00:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) close(r0) 07:00:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) close(r0) 07:00:17 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) close(r0) 07:00:17 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:17 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @empty}, 0xc) close(r0) 07:00:17 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:17 executing program 4: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:18 executing program 3: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:18 executing program 1: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:18 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:18 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:18 executing program 4: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:18 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:18 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:18 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:18 executing program 1: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:18 executing program 3: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:18 executing program 4: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:18 executing program 0: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:18 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:18 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:18 executing program 1: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:18 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:18 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x7ffff000}}, 0x0) 07:00:18 executing program 3: r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) shutdown(r1, 0x0) 07:00:18 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2ffffffffffffffffaac3160a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003ec0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0xf800}], 0x1, 0x0, 0x7000000, 0x7000e00}}], 0x1, 0x0, 0x0) 07:00:18 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:18 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) 07:00:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) 07:00:18 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x3, @default, 0x1}, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = accept4(r0, &(0x7f0000000080)=@caif=@dbg, &(0x7f0000000100)=0x80, 0x1000) accept4$ax25(r1, &(0x7f00000001c0)={{}, [@null, @bcast, @default, @remote, @bcast, @default, @remote, @default]}, &(0x7f0000000240)=0x48, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @bcast, 0xee00}) bind$ax25(r0, &(0x7f0000000000)={{0x3, @null}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) 07:00:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 07:00:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) 07:00:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) 07:00:18 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) [ 247.061494][ T8985] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:00:18 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x7ffff000}}, 0x0) 07:00:18 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) 07:00:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2ffffffffffffffffaac3160a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003ec0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0xf800}], 0x1, 0x0, 0x7000000, 0x7000e00}}], 0x1, 0x0, 0x0) 07:00:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) 07:00:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 07:00:19 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) [ 247.373107][ T8985] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.538504][ T8985] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.728579][ T8985] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.043320][ T8985] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.068967][ T8985] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 07:00:19 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2ffffffffffffffffaac3160a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003ec0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0xf800}], 0x1, 0x0, 0x7000000, 0x7000e00}}], 0x1, 0x0, 0x0) 07:00:19 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 07:00:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) 07:00:19 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2ffffffffffffffffaac3160a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003ec0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0xf800}], 0x1, 0x0, 0x7000000, 0x7000e00}}], 0x1, 0x0, 0x0) 07:00:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) 07:00:19 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x7ffff000}}, 0x0) [ 248.104710][ T8985] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.137340][ T8985] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:00:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2ffffffffffffffffaac3160a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003ec0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0xf800}], 0x1, 0x0, 0x7000000, 0x7000e00}}], 0x1, 0x0, 0x0) 07:00:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) 07:00:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2ffffffffffffffffaac3160a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003ec0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0xf800}], 0x1, 0x0, 0x7000000, 0x7000e00}}], 0x1, 0x0, 0x0) 07:00:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) 07:00:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2ffffffffffffffffaac3160a0000", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003ec0)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0xf800}], 0x1, 0x0, 0x7000000, 0x7000e00}}], 0x1, 0x0, 0x0) 07:00:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) [ 248.436977][ T9025] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:00:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) [ 248.668611][ T9024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:00:20 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x7ffff000}}, 0x0) [ 248.871123][ T9033] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.959090][ T9025] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.048755][ T9038] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.191250][ T9041] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 07:00:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) [ 249.269131][ T9024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.441231][ T9033] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.494863][ T9025] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.541062][ T9038] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.632231][ T9041] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.705464][ T9024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.781616][ T9046] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.848981][ T9033] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.899108][ T9025] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.956762][ T9038] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.029111][ T9041] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.104346][ T9024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.178430][ T9046] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.260295][ T9033] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.325471][ T9038] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.386883][ T9041] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.519249][ T9046] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.692987][ T9046] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.741620][ T9024] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.809134][ T9041] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.829155][ T9041] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.882160][ T9024] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.916922][ T9038] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.958241][ T9033] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.993083][ T9041] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.033422][ T9024] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.087789][ T9038] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.126544][ T9038] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.160413][ T9033] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.188093][ T9041] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:00:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) [ 251.220097][ T9024] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.290266][ T9038] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.329371][ T9033] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.363047][ T9033] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.454445][ T9049] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.517953][ T9046] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.575065][ T9046] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.594651][ T9049] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.671448][ T9046] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.722811][ T9049] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.769826][ T9046] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.823765][ T9049] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.722124][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 252.728190][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 252.735182][ T5558] Bluetooth: hci3: command 0x0406 tx timeout [ 252.735208][ T5089] Bluetooth: hci1: command 0x0406 tx timeout [ 252.735245][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 252.741387][ T5558] Bluetooth: hci4: command 0x0406 tx timeout [ 253.745235][ T9025] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.782609][ T9025] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 07:00:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) 07:00:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) 07:00:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) 07:00:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) 07:00:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) [ 253.827996][ T9025] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.862897][ T9025] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.989974][ T9056] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.116718][ T9055] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.145884][ T9057] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.185735][ T9058] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.224876][ T9060] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.323254][ T9056] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.417861][ T9055] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.461510][ T9057] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.495944][ T9058] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.521281][ T9060] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.564358][ T9056] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.609394][ T9055] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.659002][ T9057] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.714071][ T9058] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.832909][ T9060] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.876310][ T9056] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.906384][ T9055] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.935518][ T9057] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.002831][ T9058] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.052793][ T9060] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.766877][ T1211] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.773354][ T1211] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.291286][ T9056] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.329628][ T9056] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 07:00:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) [ 256.369168][ T9056] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.408121][ T9056] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.488738][ T9067] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.579366][ T9067] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.659642][ T9067] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.780333][ T9067] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.857922][ T9058] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.914522][ T9049] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.938950][ T9057] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.970909][ T9057] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.018494][ T9058] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.047509][ T9049] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.079650][ T9049] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.104315][ T9057] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.128904][ T9058] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.157565][ T9049] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:00:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) [ 257.177090][ T9057] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:00:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) [ 257.220080][ T9058] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:00:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) [ 257.327358][ T9071] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.430833][ T9073] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.469524][ T9076] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.528362][ T9071] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.593927][ T9076] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.656860][ T9073] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.703794][ T9055] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.763104][ T9071] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.804710][ T9076] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.839716][ T9073] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.889252][ T9055] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.929490][ T9071] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.952362][ T9076] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.991465][ T9073] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.026601][ T9055] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.054398][ T9055] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:00:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) [ 258.205466][ T9081] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.319268][ T9081] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.425448][ T9081] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.506824][ T9081] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.760643][ T9060] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.803956][ T9060] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.835706][ T9060] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 07:00:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001100)={0x14, 0x33, 0x1, 0x0, 0x0, "", [@generic='\f']}, 0x14}], 0x1}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in, @in6=@initdev}}, {{@in6=@private2}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r4 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000140)={0x0, 0x870c, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0xa78472a963866823, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000fbba4e7c5644a8aa87c20194da06668303b194a89e0197bc388f00b9f0446ce07475", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000100000000000000"], 0xb8}}, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) [ 259.887030][ T9060] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.999629][ T9084] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.069700][ T9084] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.149618][ T9084] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.219082][ T9084] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.938018][ T9067] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.976162][ T9067] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.010298][ T9067] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.050393][ T9067] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:00:33 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x7ffff000}}, 0x0) 07:00:34 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x7ffff000}}, 0x0) 07:00:34 executing program 0: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x7ffff000}}, 0x0) [ 262.623214][ T9073] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.658136][ T9073] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.708552][ T9073] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.747612][ T9073] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:00:34 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x7ffff000}}, 0x0) [ 262.934336][ T9076] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.978396][ T9076] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 07:00:34 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) [ 263.050118][ T9076] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 07:00:34 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) [ 263.123037][ T9076] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:00:35 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x7ffff000}}, 0x0) [ 263.239760][ T9071] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.280644][ T9071] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.337455][ T9071] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.385675][ T9081] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.417762][ T9071] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:00:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) 07:00:35 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 07:00:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) [ 263.445782][ T9081] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.529573][ T9081] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 07:00:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) [ 263.583978][ T9081] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.406473][ T9084] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.421651][ T9084] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.437492][ T9084] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 07:00:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x0) 07:00:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x39, 0x24}}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x61, 0x10, &(0x7f0000000000), 0xfffffffffffffca5}, 0x48) 07:00:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) 07:00:37 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') 07:00:37 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x10}, 0x7ffff000}}, 0x0) 07:00:37 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3f388e", 0x8, 0x0, 0x0, @remote, @local, {[@fragment={0x0, 0x0, 0x7}]}}}}}, 0x0) [ 265.453519][ T9084] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 07:00:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x39, 0x24}}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x61, 0x10, &(0x7f0000000000), 0xfffffffffffffca5}, 0x48) 07:00:37 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') 07:00:37 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @bcast, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 07:00:37 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') 07:00:37 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @bcast, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 07:00:37 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3f388e", 0x8, 0x0, 0x0, @remote, @local, {[@fragment={0x0, 0x0, 0x7}]}}}}}, 0x0) 07:00:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10012, r1, 0x1000) 07:00:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x39, 0x24}}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x61, 0x10, &(0x7f0000000000), 0xfffffffffffffca5}, 0x48) 07:00:37 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000980)='ns/time\x00') 07:00:37 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @bcast, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 07:00:37 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @bcast, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 07:00:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x39, 0x24}}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x61, 0x10, &(0x7f0000000000), 0xfffffffffffffca5}, 0x48) 07:00:37 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3f388e", 0x8, 0x0, 0x0, @remote, @local, {[@fragment={0x0, 0x0, 0x7}]}}}}}, 0x0) 07:00:37 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @bcast, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 07:00:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000000c0)=0xfffffffa, 0x4) 07:00:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x609, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) 07:00:37 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @bcast, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 07:00:37 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_lifetime={0x4, 0x4}, @sadb_lifetime={0x4, 0x3, 0x1}]}, 0x98}}, 0x0) 07:00:37 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "3f388e", 0x8, 0x0, 0x0, @remote, @local, {[@fragment={0x0, 0x0, 0x7}]}}}}}, 0x0) 07:00:37 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100), 0x4) 07:00:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000fdff7f006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0b725ad999817fd98cd824498949714ffaac8a6f770600dcca5582054d54d53cd2b6db714e4b94bdaa214fa68a0557eb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7180000008c60897d4a6148a1c1078e186f99f2c9df3d1f8c96db6b14d8da011bde60beac671e8e8fdecb03588aa623fa71f31bf0f863ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed0000000000000000000000000000000000000000000500000000007c66764502737eb6601cfe2253eee47e0b68eca88c6e9e93ebe1c02198f617c3f485d9010f6471b58a6b31be4b5d80b2789328fea98a4d4b0e7d0b727b84eb78638cabad80f565916aa5fd40efd9bbdbfbfaa54aa2c23bf351035ad22a9cf0d24404d478c016633f"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000000c0)=0xfffffffa, 0x4) 07:00:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x609, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) 07:00:37 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x0, @bcast, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 07:00:37 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000fdff7f006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0b725ad999817fd98cd824498949714ffaac8a6f770600dcca5582054d54d53cd2b6db714e4b94bdaa214fa68a0557eb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7180000008c60897d4a6148a1c1078e186f99f2c9df3d1f8c96db6b14d8da011bde60beac671e8e8fdecb03588aa623fa71f31bf0f863ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed0000000000000000000000000000000000000000000500000000007c66764502737eb6601cfe2253eee47e0b68eca88c6e9e93ebe1c02198f617c3f485d9010f6471b58a6b31be4b5d80b2789328fea98a4d4b0e7d0b727b84eb78638cabad80f565916aa5fd40efd9bbdbfbfaa54aa2c23bf351035ad22a9cf0d24404d478c016633f"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000000c0)=0xfffffffa, 0x4) 07:00:37 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100), 0x4) 07:00:37 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000fdff7f006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0b725ad999817fd98cd824498949714ffaac8a6f770600dcca5582054d54d53cd2b6db714e4b94bdaa214fa68a0557eb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7180000008c60897d4a6148a1c1078e186f99f2c9df3d1f8c96db6b14d8da011bde60beac671e8e8fdecb03588aa623fa71f31bf0f863ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed0000000000000000000000000000000000000000000500000000007c66764502737eb6601cfe2253eee47e0b68eca88c6e9e93ebe1c02198f617c3f485d9010f6471b58a6b31be4b5d80b2789328fea98a4d4b0e7d0b727b84eb78638cabad80f565916aa5fd40efd9bbdbfbfaa54aa2c23bf351035ad22a9cf0d24404d478c016633f"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000000c0)=0xfffffffa, 0x4) 07:00:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x609, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) 07:00:38 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100), 0x4) 07:00:38 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100), 0x4) 07:00:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_lifetime={0x4, 0x4}, @sadb_lifetime={0x4, 0x3, 0x1}]}, 0x98}}, 0x0) 07:00:38 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000000c0)=0xfffffffa, 0x4) 07:00:38 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000000c0)=0xfffffffa, 0x4) 07:00:38 executing program 4: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100), 0x4) 07:00:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x609, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}}, 0x0) 07:00:38 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100), 0x4) 07:00:38 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000000c0)=0xfffffffa, 0x4) 07:00:38 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000000c0)=0xfffffffa, 0x4) 07:00:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) r2 = accept$inet(r0, 0x0, &(0x7f0000000040)) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)={0xfffb}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000380)="ad", 0x7ffff070}], 0x1) 07:00:38 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x10d, 0x20, &(0x7f0000000500)={@dev}, 0x20) 07:00:38 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000100), 0x4) 07:00:38 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}}}}}, 0x0) 07:00:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_lifetime={0x4, 0x4}, @sadb_lifetime={0x4, 0x3, 0x1}]}, 0x98}}, 0x0) 07:00:38 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000000c0)=0xfffffffa, 0x4) 07:00:38 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x10d, 0x20, &(0x7f0000000500)={@dev}, 0x20) 07:00:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:38 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}}}}}, 0x0) 07:00:38 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f00000000c0)=0xfffffffa, 0x4) 07:00:38 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x10d, 0x20, &(0x7f0000000500)={@dev}, 0x20) 07:00:38 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) r2 = accept$inet(r0, 0x0, &(0x7f0000000040)) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)={0xfffb}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000380)="ad", 0x7ffff070}], 0x1) 07:00:38 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}}}}}, 0x0) 07:00:38 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x10d, 0x20, &(0x7f0000000500)={@dev}, 0x20) 07:00:38 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) r2 = accept$inet(r0, 0x0, &(0x7f0000000040)) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)={0xfffb}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000380)="ad", 0x7ffff070}], 0x1) 07:00:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:38 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x600000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x0, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_lifetime={0x4, 0x4}, @sadb_lifetime={0x4, 0x3, 0x1}]}, 0x98}}, 0x0) 07:00:38 executing program 3: syz_emit_ethernet(0x22, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr, @multicast1}}}}}, 0x0) 07:00:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:38 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) r2 = accept$inet(r0, 0x0, &(0x7f0000000040)) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)={0xfffb}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000380)="ad", 0x7ffff070}], 0x1) 07:00:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) r2 = accept$inet(r0, 0x0, &(0x7f0000000040)) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)={0xfffb}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000380)="ad", 0x7ffff070}], 0x1) 07:00:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) r2 = accept$inet(r0, 0x0, &(0x7f0000000040)) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)={0xfffb}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000380)="ad", 0x7ffff070}], 0x1) 07:00:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) r2 = accept$inet(r0, 0x0, &(0x7f0000000040)) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)={0xfffb}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000380)="ad", 0x7ffff070}], 0x1) 07:00:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240)=ANY=[], 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000}) 07:00:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) r2 = accept$inet(r0, 0x0, &(0x7f0000000040)) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)={0xfffb}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000380)="ad", 0x7ffff070}], 0x1) [ 267.997960][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.149750][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 268.149765][ T27] audit: type=1804 audit(1678431639.936:144): pid=9277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2380528697/syzkaller.5eCnCG/146/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 07:00:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) r2 = accept$inet(r0, 0x0, &(0x7f0000000040)) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)={0xfffb}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000380)="ad", 0x7ffff070}], 0x1) 07:00:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x1a, 0x401, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) 07:00:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x1, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) 07:00:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x1a, 0x401, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) [ 268.427375][ T9291] tipc: Started in network mode 07:00:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x1a, 0x401, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) 07:00:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) [ 268.481972][ T9291] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 07:00:40 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) r2 = accept$inet(r0, 0x0, &(0x7f0000000040)) ioctl$SIOCGETMIFCNT_IN6(r2, 0x89e0, &(0x7f0000000100)={0xfffb}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780)=ANY=[], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28012, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000380)="ad", 0x7ffff070}], 0x1) 07:00:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) [ 268.535650][ T9291] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0000 07:00:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv4_delroute={0x24, 0x1a, 0x401, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x0) [ 268.585145][ T9291] tipc: Enabled bearer , priority 10 07:00:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x1, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) [ 268.633694][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 07:00:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x1, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) [ 268.754653][ T9307] tipc: Enabling of bearer rejected, already enabled [ 268.771886][ T27] audit: type=1804 audit(1678431640.556:145): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2380528697/syzkaller.5eCnCG/147/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0 07:00:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x1, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @private2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) [ 268.884874][ T9314] tipc: Enabling of bearer rejected, already enabled 07:00:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) [ 269.084901][ T9320] tipc: Enabling of bearer rejected, already enabled 07:00:40 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) [ 269.191098][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.314768][ T27] audit: type=1804 audit(1678431641.106:146): pid=9327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2380528697/syzkaller.5eCnCG/148/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0 07:00:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) [ 269.663147][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.703232][ T7553] tipc: Node number set to 1 07:00:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) [ 269.844085][ T27] audit: type=1804 audit(1678431641.636:147): pid=9343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2380528697/syzkaller.5eCnCG/149/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 07:00:41 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:41 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:42 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:43 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:43 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:43 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:43 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:44 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:44 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:44 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:44 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:45 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:45 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:45 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:45 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:45 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:45 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:46 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:46 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:46 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:47 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:47 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:47 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:47 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:47 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:48 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) [ 276.756674][ T9581] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.769093][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 07:00:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) [ 276.887880][ T27] audit: type=1804 audit(1678431648.676:148): pid=9586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366970674/syzkaller.05xvPf/179/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 07:00:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) [ 276.987138][ T27] audit: type=1804 audit(1678431648.706:149): pid=9582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir776656121/syzkaller.vDkoon/156/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 277.146671][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 07:00:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) [ 277.278078][ T27] audit: type=1804 audit(1678431649.066:150): pid=9596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/167/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 07:00:49 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) [ 277.334106][ T9605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 277.441098][ T27] audit: type=1804 audit(1678431649.226:151): pid=9610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366970674/syzkaller.05xvPf/180/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0 [ 277.468853][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 07:00:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) [ 277.573220][ T27] audit: type=1804 audit(1678431649.366:152): pid=9615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir776656121/syzkaller.vDkoon/157/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 07:00:49 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private0}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf25}, 0x48) r3 = socket(0x11, 0x800000003, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, 0x0, &(0x7f0000000080)=@udp=r3}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000cc0)={0x3, 0x2}, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'batadv0\x00', {}, 0xdf}) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r5, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64], 0xfffffda4) listen(0xffffffffffffffff, 0x10000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @empty}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000001500)=ANY=[@ANYBLOB="c80000002800008649a8db0bc8012dbd7000fbdbdf2500000000423c5660dd3f696b43bb8e9f0cddf655a62983652f01b6ba914e18a085acbfb01cf5b1d4a1c7cae9a57877bb43971c7cabed75b8aefd4d53e6c01c5e771aaec54156cb61fd138a29d1339d29cb9d88cc1842625c77e6b5acf879fca9f9203d465a13e5fc8f354c1deb98f81c81b73d94a86c15d53b24b0fef20dfa2599c4f3a48de400", @ANYRES32, @ANYBLOB="0c00100009000c000800f3ff0600050000ff00000600050007000000060005000902000006000500000600000600050080800000060005008000000008000100636271006c000200180001001e011a03ffff000003000000ffffff7fff0100001000050004010000090001f001000000180001003f021e80010000004000000001000000060000001800010031031c2006000000ff0f000006000000c3b80000100005007e000000000000fc02000000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18190000", @ANYRES32, @ANYBLOB="0000000000648200186300000e0000000000000092753286f23682ece94997b7"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd2, &(0x7f0000000380)=""/210, 0x40f00, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff]}, 0x80) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r7, &(0x7f00000000c0), 0x0}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001400)={0xffffffffffffffff, 0x35b9, 0x8}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x10, 0x7ff, 0x0, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r10, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0x6, 0x9, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xb6f}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xc6d3e5e6a43b732c, 0x3, 0x0, 0x3}, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x1000, &(0x7f0000000380)=""/4096, 0x40f00, 0xa, '\x00', r1, 0x25, r6, 0x8, &(0x7f0000001380)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000013c0)={0x5, 0x4, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001440)=[r2, r7, r2, r8, r2, r9, r10]}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x50, 0x4, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x10, 0x1, 0x58cd, 0x4}}) 07:00:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) [ 277.703184][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 07:00:49 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) [ 277.832555][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.843028][ T27] audit: type=1804 audit(1678431649.636:153): pid=9622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/168/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 [ 277.864987][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 07:00:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) [ 278.005982][ T27] audit: type=1804 audit(1678431649.796:154): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2380528697/syzkaller.5eCnCG/159/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 [ 278.050513][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 07:00:49 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) [ 278.101709][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.137811][ T27] audit: type=1804 audit(1678431649.926:155): pid=9640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir776656121/syzkaller.vDkoon/158/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0 [ 278.215104][ T27] audit: type=1804 audit(1678431649.946:156): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366970674/syzkaller.05xvPf/181/cgroup.controllers" dev="sda1" ino=1184 res=1 errno=0 07:00:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) [ 278.305204][ T27] audit: type=1804 audit(1678431650.066:157): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir65001798/syzkaller.FxxHx5/186/cgroup.controllers" dev="sda1" ino=1185 res=1 errno=0 07:00:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:50 executing program 5: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)) 07:00:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:50 executing program 5: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)) 07:00:50 executing program 5: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)) 07:00:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:50 executing program 5: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)) 07:00:50 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:50 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:50 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:50 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:51 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:51 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:51 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000032c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0x1c}]}, 0x28}}, 0x44090) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x800) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast2}}}}) sendfile(r7, r1, &(0x7f0000000100), 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8000) splice(r5, 0x0, r9, 0x0, 0x7, 0x0) close(r8) ioctl$int_in(r9, 0x541b, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) 07:00:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) 07:00:51 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:52 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) 07:00:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 280.349135][ T9741] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:00:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 280.495371][ T9741] 8021q: adding VLAN 0 to HW filter on device bond1 [ 280.558505][ T9745] bond1: (slave bridge8): making interface the new active one [ 280.579240][ T9745] bond1: (slave bridge8): Enslaving as an active interface with an up link [ 280.636290][ T2062] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready 07:00:52 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) [ 280.813628][ T9759] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:00:52 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) 07:00:52 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 280.918220][ T9759] 8021q: adding VLAN 0 to HW filter on device bond2 07:00:52 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) [ 281.065269][ T9761] bond2: (slave bridge9): making interface the new active one 07:00:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be040205060564", 0x19, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 281.113650][ T9761] bond2: (slave bridge9): Enslaving as an active interface with an up link [ 281.147367][ T8241] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 281.172384][ T9764] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 281.264217][ T9764] 8021q: adding VLAN 0 to HW filter on device bond1 07:00:53 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) 07:00:53 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) [ 281.494446][ T9769] bond1: (slave bridge1): making interface the new active one [ 281.539424][ T9769] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 281.552355][ T7831] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 281.577893][ T9780] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:00:53 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) [ 281.653153][ T9780] 8021q: adding VLAN 0 to HW filter on device bond3 07:00:53 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) 07:00:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) [ 281.816100][ T9782] bond3: (slave bridge10): making interface the new active one [ 281.927437][ T9782] bond3: (slave bridge10): Enslaving as an active interface with an up link [ 281.983087][ T8241] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 282.007388][ T9788] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:00:53 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) [ 282.153309][ T9788] 8021q: adding VLAN 0 to HW filter on device bond2 07:00:54 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) [ 282.349269][ T9790] bond2: (slave bridge2): making interface the new active one [ 282.435287][ T9790] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 282.483734][ T9803] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:00:54 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) 07:00:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) [ 282.612244][ T9803] 8021q: adding VLAN 0 to HW filter on device bond4 [ 282.724580][ T9804] bond4: (slave bridge11): making interface the new active one [ 282.740458][ T9804] bond4: (slave bridge11): Enslaving as an active interface with an up link [ 282.759271][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 282.793908][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 282.829749][ T9811] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:00:54 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) [ 282.962864][ T9811] 8021q: adding VLAN 0 to HW filter on device bond3 07:00:54 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) [ 283.103725][ T9813] bond3: (slave bridge3): making interface the new active one 07:00:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) [ 283.193191][ T9813] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 283.216055][ T2062] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 283.236217][ T9821] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:00:55 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) [ 283.494896][ T9821] 8021q: adding VLAN 0 to HW filter on device bond5 [ 283.656120][ T9824] bond5: (slave bridge12): making interface the new active one [ 283.714027][ T9824] bond5: (slave bridge12): Enslaving as an active interface with an up link [ 283.743790][ T9834] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:00:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) 07:00:55 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) 07:00:55 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) [ 283.835642][ T9834] 8021q: adding VLAN 0 to HW filter on device bond4 [ 284.025973][ T9836] bond4: (slave bridge4): making interface the new active one 07:00:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) [ 284.092919][ T9836] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 284.101822][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 284.121441][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 284.144721][ T9841] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 07:00:56 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) [ 284.202212][ T9841] 8021q: adding VLAN 0 to HW filter on device bond6 07:00:56 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r1, r2, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x8000000000004) write(0xffffffffffffffff, 0x0, 0x0) [ 284.294438][ T9844] bond6: (slave bridge13): making interface the new active one [ 284.304413][ T9844] bond6: (slave bridge13): Enslaving as an active interface with an up link [ 284.315024][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready 07:00:56 executing program 2: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) [ 284.485810][ T9861] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.610865][ T9865] bond5: (slave bridge5): making interface the new active one [ 284.660277][ T9865] bond5: (slave bridge5): Enslaving as an active interface with an up link 07:00:56 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x88}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000000000000000000000900", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x2404008c}, 0x0) [ 284.785949][ T9867] 8021q: adding VLAN 0 to HW filter on device bond7 [ 284.888777][ T9869] bond7: (slave bridge14): making interface the new active one [ 284.975286][ T9869] bond7: (slave bridge14): Enslaving as an active interface with an up link [ 285.005507][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 285.038084][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready 07:00:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_ts_info}) [ 285.176742][ T9873] 8021q: adding VLAN 0 to HW filter on device bond6 07:00:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_0\x00', 0x0}) r3 = getpid() sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}}, 0x0) 07:00:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:57 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/net\x00') write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 07:00:57 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000000)={'vcan0\x00'}) 07:00:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x4, 0x182c, 0x4, 0x1}, 0x48) [ 285.365748][ T9874] bond6: (slave bridge6): making interface the new active one [ 285.411057][ T9874] bond6: (slave bridge6): Enslaving as an active interface with an up link 07:00:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_0\x00', 0x0}) r3 = getpid() sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}}, 0x0) 07:00:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_ts_info}) [ 285.461773][ T5097] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready 07:00:57 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000000)={'vcan0\x00'}) 07:00:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_ts_info}) 07:00:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x4, 0x182c, 0x4, 0x1}, 0x48) 07:00:57 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000000)={'vcan0\x00'}) [ 285.553272][ T27] kauditd_printk_skb: 24 callbacks suppressed [ 285.553288][ T27] audit: type=1804 audit(1678431657.346:182): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366970674/syzkaller.05xvPf/189/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 07:00:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_0\x00', 0x0}) r3 = getpid() sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}}, 0x0) 07:00:57 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000000)={'vcan0\x00'}) 07:00:57 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:57 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000000)={'vcan0\x00'}) 07:00:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_ts_info}) 07:00:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x4, 0x182c, 0x4, 0x1}, 0x48) 07:00:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bond_slave_0\x00', 0x0}) r3 = getpid() sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}}, 0x0) 07:00:57 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000000)={'vcan0\x00'}) 07:00:57 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000000)={'vcan0\x00'}) 07:00:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x14, 0x4, 0x4, 0x182c, 0x4, 0x1}, 0x48) 07:00:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:57 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 286.148324][ T27] audit: type=1804 audit(1678431657.936:183): pid=9924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366970674/syzkaller.05xvPf/190/cgroup.controllers" dev="sda1" ino=1175 res=1 errno=0 [ 286.220803][ T27] audit: type=1804 audit(1678431657.996:184): pid=9925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2380528697/syzkaller.5eCnCG/172/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 286.285117][ T27] audit: type=1804 audit(1678431658.046:185): pid=9927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir776656121/syzkaller.vDkoon/173/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 07:00:58 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:58 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 286.395605][ T27] audit: type=1804 audit(1678431658.046:186): pid=9931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/186/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 07:00:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 286.536375][ T27] audit: type=1804 audit(1678431658.066:187): pid=9926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2742128074/syzkaller.4oHC0x/168/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0 07:00:58 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 286.901096][ T27] audit: type=1804 audit(1678431658.686:188): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2380528697/syzkaller.5eCnCG/173/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0 [ 286.995930][ T27] audit: type=1804 audit(1678431658.716:189): pid=9937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir65001798/syzkaller.FxxHx5/199/cgroup.controllers" dev="sda1" ino=1168 res=1 errno=0 07:00:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 287.104104][ T27] audit: type=1804 audit(1678431658.756:190): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366970674/syzkaller.05xvPf/191/cgroup.controllers" dev="sda1" ino=1191 res=1 errno=0 [ 287.210031][ T27] audit: type=1804 audit(1678431658.926:191): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/187/cgroup.controllers" dev="sda1" ino=1157 res=1 errno=0 07:00:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:59 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:59 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:59 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) 07:00:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) 07:00:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) 07:00:59 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x1f4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_IE={0x19, 0x2a, [@mic={0x8c, 0x10, {0x0, "4ec5ea2cf9b4", @short="be3c6c365ada9677"}}, @dsss={0x3, 0x1}]}, @NL80211_ATTR_IE={0x105, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1}, @gcr_ga={0xbd, 0x6}, @random={0x0, 0xf1, "9ce80180ae2f6088b48a69f13ac5de5fd7701a371fb434af45532d5915ee124c2806b48f3b6078feec8084866cae403170585a4c89068cf47f965f35afba00143d7378bac086dc8eb7a9d34c24a051c25cb65eb577c5d04efcc14b4a4b5dba14b973172516d77ad14d3cbffad661f65bb17fc62d6f81d6e3c56f99a6cb6a2284ff645c387e3f2e404a71bf36e4a5ceab7e7a78bd93c3240645d57c8ae5fa68bed607d5f6f4c3ea0b7f8480b82b3d4bcfdff36804c3fd21893236e061c10bb2c0e989806652a476fb6d4869c6d3c8ffbd684556e23fea00fb5323ccd3f8e1b38d53862fa1116307199d5443a60ad544f6aa"}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x76, 0xfa, "48df934f9321dc9d44a3ca6c104baa565ebdc7817fdfdd32c7da5f52316f772bdc3953bdb653e124883e342025fdf3ffb67bb085cc38a48361910da3e053aae5927169c7af05275b88990a5f3982b69d693ea955aef6649a9c95efbe11b2df00caae52203b0f4c66da2cae300344c48c83e3"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "2507659336"}], @NL80211_ATTR_IE={0x22, 0x2a, [@supported_rates, @ht={0x2d, 0x1a}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x1f4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 07:00:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}}, 0x0) 07:01:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000400000000000000000000000a010000000000000001000085000000000000000002"], 0x0, 0x4a}, 0x20) 07:01:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000400000000000000000000000a010000000000000001000085000000000000000002"], 0x0, 0x4a}, 0x20) 07:01:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000180)="40cb091a8fcc6b04779b", 0xa}, {&(0x7f0000000200)="8d0188a8", 0x4}, {&(0x7f0000000040)="40444ea6", 0x4}], 0x3) 07:01:00 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='X'], 0x6) 07:01:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000400000000000000000000000a010000000000000001000085000000000000000002"], 0x0, 0x4a}, 0x20) [ 288.641011][ T9987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.674904][ T9987] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.686985][ T9993] Bluetooth: MGMT ver 1.22 [ 288.713723][ T9987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:01:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000000400000000000000000000000a010000000000000001000085000000000000000002"], 0x0, 0x4a}, 0x20) 07:01:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='X'], 0x6) 07:01:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000180)="40cb091a8fcc6b04779b", 0xa}, {&(0x7f0000000200)="8d0188a8", 0x4}, {&(0x7f0000000040)="40444ea6", 0x4}], 0x3) 07:01:00 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000180)="40cb091a8fcc6b04779b", 0xa}, {&(0x7f0000000200)="8d0188a8", 0x4}, {&(0x7f0000000040)="40444ea6", 0x4}], 0x3) [ 288.965157][T10002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 288.983144][T10002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.052441][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 289.065616][T10004] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 289.080903][T10004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:01:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='X'], 0x6) 07:01:00 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='X'], 0x6) 07:01:00 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) 07:01:00 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000180)="40cb091a8fcc6b04779b", 0xa}, {&(0x7f0000000200)="8d0188a8", 0x4}, {&(0x7f0000000040)="40444ea6", 0x4}], 0x3) 07:01:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='X'], 0x6) [ 289.304398][T10014] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 289.324824][T10014] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:01:01 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:01 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000180)="40cb091a8fcc6b04779b", 0xa}, {&(0x7f0000000200)="8d0188a8", 0x4}, {&(0x7f0000000040)="40444ea6", 0x4}], 0x3) 07:01:01 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000180)="40cb091a8fcc6b04779b", 0xa}, {&(0x7f0000000200)="8d0188a8", 0x4}, {&(0x7f0000000040)="40444ea6", 0x4}], 0x3) 07:01:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) 07:01:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='X'], 0x6) 07:01:01 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) 07:01:01 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) 07:01:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) 07:01:01 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='X'], 0x6) 07:01:01 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) [ 289.603079][T10024] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:01:01 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:01 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) [ 289.663221][T10024] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.753880][T10027] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 289.794354][T10027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:01:02 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:02 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:02 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:02 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'\x00', 0x846512678b3a18b2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11003}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) writev(r0, &(0x7f0000001500)=[{&(0x7f0000000180)="40cb091a8fcc6b04779b", 0xa}, {&(0x7f0000000200)="8d0188a8", 0x4}, {&(0x7f0000000040)="40444ea6", 0x4}], 0x3) 07:01:02 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) [ 290.500194][T10051] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 290.526093][T10051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 07:01:02 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:02 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) 07:01:02 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) 07:01:02 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff}) vmsplice(r3, 0x0, 0x0, 0x0) 07:01:02 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 07:01:02 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 07:01:02 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 07:01:03 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:03 executing program 5: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:03 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 07:01:03 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:03 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:03 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:03 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 07:01:03 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 07:01:03 executing program 2: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, 0x0) 07:01:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff00000000080000"], 0x34}}, 0x0) [ 291.881450][T10100] __nla_validate_parse: 11 callbacks suppressed [ 291.881468][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.898858][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff00000000080000"], 0x34}}, 0x0) 07:01:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff00000000080000"], 0x34}}, 0x0) [ 292.008929][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.043507][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.114242][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.145561][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:04 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff00000000080000"], 0x34}}, 0x0) 07:01:04 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:04 executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000340)={r2, 0x3, 0x401, 0x1}) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendfile(r4, r6, 0x0, 0xf03b0000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141400080002007f0020010c00028005000100000000001c001080080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000000000080007"], 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x7fff, 0x0) 07:01:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff00000000080000"], 0x34}}, 0x0) [ 292.342589][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.392976][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 292.412572][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 07:01:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff00000000080000"], 0x34}}, 0x0) [ 292.488717][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 07:01:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff00000000080000"], 0x34}}, 0x0) 07:01:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff00000000080000"], 0x34}}, 0x0) 07:01:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff00000000080000"], 0x34}}, 0x0) 07:01:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="1400020000000000000000000000ffff00000000080000"], 0x34}}, 0x0) 07:01:04 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 07:01:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 07:01:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 07:01:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 07:01:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 07:01:05 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 07:01:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 07:01:05 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 07:01:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 07:01:05 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 07:01:05 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000014400eeffffffff071af7000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6000000024000b0e00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000004508000100746266003400020008000600a4230000280001"], 0x60}}, 0x0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="41042c1ef21d480407020200c52cf7c25975e005b02f0800eb2b2ff0dac8897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0x5c13, 0x806, 0x0, 0x2f) 07:01:05 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 07:01:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 07:01:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d05000000000000000003020200090001"], 0x2c}, 0x1, 0x40030000000000}, 0x0) 07:01:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 07:01:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f4d2}) 07:01:05 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d05000000000000000003020200090001"], 0x2c}, 0x1, 0x40030000000000}, 0x0) 07:01:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x2c}}, 0x0) 07:01:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 07:01:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 07:01:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d05000000000000000003020200090001"], 0x2c}, 0x1, 0x40030000000000}, 0x0) 07:01:06 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 07:01:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 07:01:06 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0d05000000000000000003020200090001"], 0x2c}, 0x1, 0x40030000000000}, 0x0) 07:01:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:06 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 07:01:06 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 07:01:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f4d2}) 07:01:06 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) 07:01:06 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f4d2}) 07:01:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 07:01:07 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 07:01:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f4d2}) 07:01:08 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f4d2}) 07:01:08 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 07:01:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 07:01:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f4d2}) 07:01:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) ioctl$FITRIM(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x800f4d2}) 07:01:09 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 07:01:09 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 07:01:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:11 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:11 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:11 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 07:01:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:11 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:11 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, 0x0, 0x300) 07:01:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:12 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, 0x0, 0x300) 07:01:12 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x2880008, r1}) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x100000000, 0xfff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 07:01:12 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, 0x0, 0x300) 07:01:12 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, 0x0, 0x300) 07:01:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x5000000, 0x0, @l2={'eth', 0x3a, 'geneve0\x00'}}}}}, 0x34}}, 0x0) [ 300.753710][T10418] tipc: Started in network mode [ 300.779320][T10418] tipc: Node identity aaaaaaaaaa4, cluster identity 4711 [ 300.821025][T10418] tipc: Enabled bearer , priority 10 07:01:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x5000000, 0x0, @l2={'eth', 0x3a, 'geneve0\x00'}}}}}, 0x34}}, 0x0) 07:01:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 07:01:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 07:01:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x5000000, 0x0, @l2={'eth', 0x3a, 'geneve0\x00'}}}}}, 0x34}}, 0x0) [ 301.010387][T10423] tipc: Enabling of bearer rejected, already enabled 07:01:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) 07:01:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 07:01:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 301.174021][T10430] tipc: Enabling of bearer rejected, already enabled 07:01:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x5000000, 0x0, @l2={'eth', 0x3a, 'geneve0\x00'}}}}}, 0x34}}, 0x0) [ 301.220599][T10431] __nla_validate_parse: 27 callbacks suppressed [ 301.220619][T10431] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. 07:01:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 07:01:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) [ 301.283891][T10438] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 301.324666][T10431] tc_dump_action: action bad kind [ 301.352020][T10434] validate_nla: 3 callbacks suppressed [ 301.352037][T10434] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:01:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 07:01:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x18, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) 07:01:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 301.464039][T10439] tipc: Enabling of bearer rejected, already enabled [ 301.494362][T10441] 8021q: adding VLAN 0 to HW filter on device bond7 [ 301.548507][T10441] bond0: (slave bond7): Enslaving as an active interface with an up link 07:01:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 301.595818][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 301.595832][ T27] audit: type=1804 audit(1678431673.386:201): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2742128074/syzkaller.4oHC0x/191/cgroup.controllers" dev="sda1" ino=1182 res=1 errno=0 [ 301.722632][T10461] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 301.785810][T10461] 8021q: adding VLAN 0 to HW filter on device bond8 [ 301.795340][T10461] bond0: (slave bond8): Enslaving as an active interface with an up link [ 301.942040][ T7831] tipc: Node number set to 15379114 07:01:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={0x77359400}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 07:01:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 07:01:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 07:01:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 07:01:13 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 07:01:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) [ 302.036396][T10470] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 302.062702][T10469] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 302.122690][T10477] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. 07:01:14 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 302.204031][T10470] 8021q: adding VLAN 0 to HW filter on device bond9 07:01:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) [ 302.272872][T10470] bond0: (slave bond9): Enslaving as an active interface with an up link 07:01:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 302.363102][T10478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.371763][T10478] bond0: (slave bond1): Enslaving as an active interface with an up link 07:01:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) 07:01:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) [ 302.543610][T10472] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.588060][ T27] audit: type=1804 audit(1678431674.376:202): pid=10483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2742128074/syzkaller.4oHC0x/192/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0 [ 302.594213][T10472] tc_dump_action: action bad kind [ 302.627256][T10492] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 07:01:14 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) [ 302.640474][T10499] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.642928][T10500] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.709713][T10494] 8021q: adding VLAN 0 to HW filter on device bond10 [ 302.748578][T10494] bond0: (slave bond10): Enslaving as an active interface with an up link [ 302.769657][T10497] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.802332][T10497] tc_dump_action: action bad kind [ 302.815233][T10498] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.862671][T10498] tc_dump_action: action bad kind [ 302.926097][T10505] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 303.010043][T10507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.045545][T10507] bond0: (slave bond2): Enslaving as an active interface with an up link [ 303.059222][T10472] syz-executor.4: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 303.076820][T10472] CPU: 1 PID: 10472 Comm: syz-executor.4 Not tainted 6.2.0-syzkaller-13008-gdb47fa2e4cbf #0 [ 303.086938][T10472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 303.097026][T10472] Call Trace: [ 303.100332][T10472] [ 303.103298][T10472] dump_stack_lvl+0x136/0x150 [ 303.108134][T10472] warn_alloc+0x213/0x360 [ 303.112588][T10472] ? zone_watermark_ok_safe+0x300/0x300 [ 303.118655][T10472] __vmalloc_node_range+0xf1c/0x1300 [ 303.124007][T10472] ? netlink_sendmsg+0x69e/0xe30 [ 303.129089][T10472] ? delayed_vfree_work+0x70/0x70 [ 303.133967][ T27] audit: type=1804 audit(1678431674.866:203): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2380528697/syzkaller.5eCnCG/217/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 [ 303.134141][T10472] ? netlink_sendmsg+0x69e/0xe30 [ 303.165495][T10472] vmalloc+0x6b/0x80 [ 303.169432][T10472] ? netlink_sendmsg+0x69e/0xe30 [ 303.174411][T10472] netlink_sendmsg+0x69e/0xe30 [ 303.179223][T10472] ? netlink_unicast+0x7f0/0x7f0 [ 303.184214][T10472] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 303.189647][T10472] ? netlink_unicast+0x7f0/0x7f0 [ 303.194632][T10472] sock_sendmsg+0xde/0x190 [ 303.199151][T10472] sock_no_sendpage+0x10c/0x160 [ 303.204071][T10472] ? sk_page_frag_refill+0x300/0x300 [ 303.209404][T10472] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 303.215859][T10472] ? find_held_lock+0x2d/0x110 [ 303.220674][T10472] kernel_sendpage.part.0+0x1d5/0x700 [ 303.226091][T10472] sock_sendpage+0xe7/0x180 [ 303.230643][T10472] ? kernel_sendpage+0xd0/0xd0 [ 303.235444][T10472] pipe_to_sendpage+0x2b1/0x380 [ 303.240424][T10472] ? propagate_umount+0x19f0/0x19f0 [ 303.245685][T10472] __splice_from_pipe+0x449/0x8a0 [ 303.250757][T10472] ? propagate_umount+0x19f0/0x19f0 [ 303.256006][T10472] generic_splice_sendpage+0xd8/0x140 [ 303.261430][T10472] ? __do_sys_vmsplice+0xaa0/0xaa0 [ 303.264530][ T27] audit: type=1804 audit(1678431675.036:204): pid=10500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir776656121/syzkaller.vDkoon/211/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0 [ 303.266565][T10472] ? security_file_permission+0xaf/0xd0 [ 303.298524][T10472] ? __do_sys_vmsplice+0xaa0/0xaa0 [ 303.303701][T10472] direct_splice_actor+0x114/0x180 [ 303.308873][T10472] splice_direct_to_actor+0x335/0x8a0 [ 303.314305][T10472] ? folio_flags.constprop.0+0x150/0x150 [ 303.319996][T10472] ? direct_splice_actor+0x180/0x180 [ 303.325328][T10472] ? bpf_lsm_file_permission+0x9/0x10 [ 303.330741][T10472] ? security_file_permission+0xaf/0xd0 [ 303.336351][T10472] do_splice_direct+0x1ab/0x280 [ 303.341251][T10472] ? splice_direct_to_actor+0x8a0/0x8a0 [ 303.346860][T10472] ? bpf_lsm_file_permission+0x9/0x10 [ 303.352279][T10472] ? security_file_permission+0xaf/0xd0 [ 303.357890][T10472] do_sendfile+0xb19/0x12c0 [ 303.362523][T10472] ? vfs_iocb_iter_write+0x480/0x480 [ 303.367863][T10472] ? xfd_validate_state+0x5d/0x180 [ 303.373101][T10472] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 303.379105][T10472] __x64_sys_sendfile64+0x1d0/0x210 [ 303.384387][T10472] ? __ia32_sys_sendfile+0x220/0x220 [ 303.389713][T10472] ? syscall_enter_from_user_mode+0x26/0xb0 [ 303.395700][T10472] do_syscall_64+0x39/0xb0 [ 303.400232][T10472] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 303.406226][T10472] RIP: 0033:0x7f596128c0f9 [ 303.410673][T10472] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 303.430331][T10472] RSP: 002b:00007f5961ffa168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 303.438788][T10472] RAX: ffffffffffffffda RBX: 00007f59613abf80 RCX: 00007f596128c0f9 [ 303.446793][T10472] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 000000000000000a [ 303.454798][T10472] RBP: 00007f59612e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 303.462802][T10472] R10: 0000000100004001 R11: 0000000000000246 R12: 0000000000000000 [ 303.470799][T10472] R13: 00007ffebf619f8f R14: 00007f5961ffa300 R15: 0000000000022000 [ 303.478819][T10472] [ 303.486779][T10472] Mem-Info: [ 303.490169][T10472] active_anon:24602 inactive_anon:2785 isolated_anon:0 [ 303.490169][T10472] active_file:1195 inactive_file:16829 isolated_file:0 [ 303.490169][T10472] unevictable:768 dirty:303 writeback:41 [ 303.490169][T10472] slab_reclaimable:22377 slab_unreclaimable:105804 [ 303.490169][T10472] mapped:21840 shmem:1756 pagetables:585 [ 303.490169][T10472] sec_pagetables:0 bounce:0 [ 303.490169][T10472] kernel_misc_reclaimable:0 [ 303.490169][T10472] free:1386405 free_pcp:9172 free_cma:0 07:01:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 07:01:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) 07:01:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099008100000016000000a4000e80040001008c000300688f99f582121f08fbb32cbd9bfc374ccc19ad8d41697804d90495ee0f45cdb8526eea43267899a175b97431097de0eda0c672f33a61bc64319fa0bc475affa9261e3ae18470a35cccccbc34ff53d1050409211352626df02000e3df393148db16c2f19550a2d927568a5f86400684fa107f5a6eb240d379f674f43366d64502067595e0881f214404000300040001000400010004000100fd020f00260108fe08717385e7655e79b7c3fea90f9ed97f4706ebdeefefc5f5666aa9a41c1683c956a6a638b3f19e391d680e4e62e86ab324fab68e144861fc09c8027b350ef5eb149788be7f3339e36fd166f4b60de7705bcb74c83b17664996115df441503c292766f806c024e6cc2baaa1584c3032e3c69d2fef9e987a9e291de6aefdb22fb08fa0892a07fc65c2b19f0ac9322cc373af4d4e23247e26a121932cc09806f81de98d7477170b51e113501e6f1daa49121f0a55987e8da28219751133ef530b661fa5ed6b50c856c16c34e4545bfba36cde0edd611274e5cc48b717b028dd10043e13505feb488774ebdece67588da8132e181243c1f066d914ba3e5e2fe1b90016918dc003274ebe1b360795a0507b0d9cafbd041afbdf8325402001ffffffffffff05000000ffffffffffff000800000000000008021100000008000000000a19b14148362e36634e0684a8fe0a000802110000010400000008000008021100000033060000350000080211000001020000003800400802110000002c860000ffffffffffff3d00400802110000010002000008021100000005004008021100000109000000ffffffffffff14000008021100000108000000270040ffffffffffff000000000802110000000500400802110000010300000008021100000105004008021100000101000080080211000001000084fc811040ffffffffffff08000000ffffffffffff420000ffffffffffff20000000110000080211000000050000000a00000802110000010600000011004008021100000103000000ffffffffffff150000ffffffffffff330d0000270000ffffffffffff3f0000000c0000080211000000800000003c0040080211000001030000000802110000001300400802110000018a5b0000080211000001070040ffffffffffff6abe0000ffffffffffff3d00000802110000013f0000000c004008021100000005000000080211000000090000ffffffffffff010000000f0040ffffffffffff00000000ffffffffffff170000080211000001ff03000038002a01030000004f000e00800c08000802110000000802110000012bf05ef87dbc2e000700000000000000640062000301240602d70e3c0400fe0cff7206030303030303710700010001020660dd07c1b7ee30edce3e008f000e0080188100080211000001080211000000b43fbab33c21826ccf06000000000000640002000101b603010905218175801b8e9440de0da13b26a73d0fd1958521a02095b35e41d92d1bd84ce084e92a01073c04001fb5062d1a2000003d7900000000000002000800110000000003020000007072060303030303037107ff0101ffff022976060602090000040057000f007206030303030303233194b449ce803534c337e5ffb3d2809ed4313f333e2cfce1302266f9262c69ccea727b2a217249e6dc508badce4db8da8a453c0401d670066804ff0007000301a5710700010101000561004e020e0080acfa00080211000001080211000001505050505050130002000fc10180000000000000080010000006020202020202040601ce010040000602050005e0400f014d089c5b90177138b01eaf0103c03bce8b69ccd43804d64b0f37dc18691dfb769448b10f13eecbc02028feccf5cd9a26b767b646e541eabfb4825c22168b02dca1b3e53b2204534fa29a7d94dfe0e085e41f47933d2b878b804242a45f1ed5c92113ace6d757c4a499921f22938fbad6f52f87ca41f5be216bd1ac9bbc77319e890442ae026f62bd71295d79657078c47a5bfd18fb88ba92a0294261252b79a9d44a62a5f62c49d6ebadbbec973bcaf92d6b190874b47ef9c596e7f70793ca9f195ac1992047fd80470e5af1b69c3d9abdaf61265245ce0a9501a24cd22a01032d1a02000fbe0f211c0000000004001f001100000000087f000000e17206030303030303710701010101ff40007606a10934000900dd18766bed027541462ecfb96d3c80b2061fefa967ff63c2a10edd48e6471685e2dd5227707f3edb3814e40b47ac249be450d9c50f750caaba367a75fe7fb3e431f1a690184a41869f9239f6960c67279b5e691f1ff5510d2741999ebf857490106e1dd0dd8e8dcc3cd9e557a5b5950de59714b27537124b4215fb7571a999f49bd10a49bea15aa59069dc5a1088eaf155650f542ee11cffd9a723a2bc1652087d727cd24878adcd3b2fc5d8c8ccb1460dbf437bf7d5dacd72c7e5c737756be204085a2c6663a781e1dccb8f10b8facede943796a8d7185688774323f1df40a7161eb572f76d6c2316356c18640c87a6e100bb6900000c007f000406adff05000400"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) [ 303.571182][T10472] Node 0 active_anon:98308kB inactive_anon:11140kB active_file:3180kB inactive_file:67240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:87360kB dirty:1208kB writeback:64kB shmem:5488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 18432kB writeback_tmp:0kB kernel_stack:12564kB pagetables:2240kB sec_pagetables:0kB all_unreclaimable? no 07:01:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099008100000016000000a4000e80040001008c000300688f99f582121f08fbb32cbd9bfc374ccc19ad8d41697804d90495ee0f45cdb8526eea43267899a175b97431097de0eda0c672f33a61bc64319fa0bc475affa9261e3ae18470a35cccccbc34ff53d1050409211352626df02000e3df393148db16c2f19550a2d927568a5f86400684fa107f5a6eb240d379f674f43366d64502067595e0881f214404000300040001000400010004000100fd020f00260108fe08717385e7655e79b7c3fea90f9ed97f4706ebdeefefc5f5666aa9a41c1683c956a6a638b3f19e391d680e4e62e86ab324fab68e144861fc09c8027b350ef5eb149788be7f3339e36fd166f4b60de7705bcb74c83b17664996115df441503c292766f806c024e6cc2baaa1584c3032e3c69d2fef9e987a9e291de6aefdb22fb08fa0892a07fc65c2b19f0ac9322cc373af4d4e23247e26a121932cc09806f81de98d7477170b51e113501e6f1daa49121f0a55987e8da28219751133ef530b661fa5ed6b50c856c16c34e4545bfba36cde0edd611274e5cc48b717b028dd10043e13505feb488774ebdece67588da8132e181243c1f066d914ba3e5e2fe1b90016918dc003274ebe1b360795a0507b0d9cafbd041afbdf8325402001ffffffffffff05000000ffffffffffff000800000000000008021100000008000000000a19b14148362e36634e0684a8fe0a000802110000010400000008000008021100000033060000350000080211000001020000003800400802110000002c860000ffffffffffff3d00400802110000010002000008021100000005004008021100000109000000ffffffffffff14000008021100000108000000270040ffffffffffff000000000802110000000500400802110000010300000008021100000105004008021100000101000080080211000001000084fc811040ffffffffffff08000000ffffffffffff420000ffffffffffff20000000110000080211000000050000000a00000802110000010600000011004008021100000103000000ffffffffffff150000ffffffffffff330d0000270000ffffffffffff3f0000000c0000080211000000800000003c0040080211000001030000000802110000001300400802110000018a5b0000080211000001070040ffffffffffff6abe0000ffffffffffff3d00000802110000013f0000000c004008021100000005000000080211000000090000ffffffffffff010000000f0040ffffffffffff00000000ffffffffffff170000080211000001ff03000038002a01030000004f000e00800c08000802110000000802110000012bf05ef87dbc2e000700000000000000640062000301240602d70e3c0400fe0cff7206030303030303710700010001020660dd07c1b7ee30edce3e008f000e0080188100080211000001080211000000b43fbab33c21826ccf06000000000000640002000101b603010905218175801b8e9440de0da13b26a73d0fd1958521a02095b35e41d92d1bd84ce084e92a01073c04001fb5062d1a2000003d7900000000000002000800110000000003020000007072060303030303037107ff0101ffff022976060602090000040057000f007206030303030303233194b449ce803534c337e5ffb3d2809ed4313f333e2cfce1302266f9262c69ccea727b2a217249e6dc508badce4db8da8a453c0401d670066804ff0007000301a5710700010101000561004e020e0080acfa00080211000001080211000001505050505050130002000fc10180000000000000080010000006020202020202040601ce010040000602050005e0400f014d089c5b90177138b01eaf0103c03bce8b69ccd43804d64b0f37dc18691dfb769448b10f13eecbc02028feccf5cd9a26b767b646e541eabfb4825c22168b02dca1b3e53b2204534fa29a7d94dfe0e085e41f47933d2b878b804242a45f1ed5c92113ace6d757c4a499921f22938fbad6f52f87ca41f5be216bd1ac9bbc77319e890442ae026f62bd71295d79657078c47a5bfd18fb88ba92a0294261252b79a9d44a62a5f62c49d6ebadbbec973bcaf92d6b190874b47ef9c596e7f70793ca9f195ac1992047fd80470e5af1b69c3d9abdaf61265245ce0a9501a24cd22a01032d1a02000fbe0f211c0000000004001f001100000000087f000000e17206030303030303710701010101ff40007606a10934000900dd18766bed027541462ecfb96d3c80b2061fefa967ff63c2a10edd48e6471685e2dd5227707f3edb3814e40b47ac249be450d9c50f750caaba367a75fe7fb3e431f1a690184a41869f9239f6960c67279b5e691f1ff5510d2741999ebf857490106e1dd0dd8e8dcc3cd9e557a5b5950de59714b27537124b4215fb7571a999f49bd10a49bea15aa59069dc5a1088eaf155650f542ee11cffd9a723a2bc1652087d727cd24878adcd3b2fc5d8c8ccb1460dbf437bf7d5dacd72c7e5c737756be204085a2c6663a781e1dccb8f10b8facede943796a8d7185688774323f1df40a7161eb572f76d6c2316356c18640c87a6e100bb6900000c007f000406adff05000400"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="58056e757c7b3102daffa1ed64a682ac35a5a91806302245224208611112ed7fc8de41201a6353d1b6be4b32f6b34e13e237a9f0b62624d0191610cf44aaa86cbe2c30ad0feb3117b8c4dbb85ff1b12c5503ca9b12ad2688e5ac5aea6d828889f3370fb4f75657771efba3cb6e5c9879bc6db2aea687f83cfacbd47ee4e125238c5d6d6029af48ca50c9dab5c0564b7e715abb0c9fd7fa9c1008330dbf71768aa053ca71bb3bbeaa42b9fa758dcd4cefe9e273aa3aa4c4adcffa1da8df71bc17133bd69b492032776d4bf36bd12939b9ae5e7866f81d127c52dd4aebce04a9605c180edf9f4207a82d06d4785e01f02360b2903a64cef02c1d3e148580d44330026cff", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) [ 303.621072][T10512] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.5'. [ 303.652817][T10472] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 303.694804][T10512] tc_dump_action: action bad kind [ 303.700022][T10513] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 07:01:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) [ 303.731115][T10512] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.5'. [ 303.747751][T10472] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.801019][T10515] 8021q: adding VLAN 0 to HW filter on device bond3 [ 303.836143][T10472] lowmem_reserve[]: 0 2617 2619 2619 2619 [ 303.842290][T10472] Node 0 DMA32 free:1595628kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:98260kB inactive_anon:11136kB active_file:480kB inactive_file:64796kB unevictable:1536kB writepending:472kB present:3129332kB managed:2684992kB mlocked:0kB bounce:0kB free_pcp:26200kB local_pcp:21520kB free_cma:0kB [ 303.873279][T10472] lowmem_reserve[]: 0 0 1 1 1 [ 303.878208][T10472] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:48kB inactive_anon:4kB active_file:0kB inactive_file:1544kB unevictable:0kB writepending:0kB present:1048576kB managed:1612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 303.921095][T10472] lowmem_reserve[]: 0 0 0 0 0 [ 303.933692][T10472] Node 1 Normal free:3934620kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117612kB mlocked:0kB bounce:0kB free_pcp:16768kB local_pcp:7392kB free_cma:0kB [ 303.952167][T10515] bond0: (slave bond3): Enslaving as an active interface with an up link [ 304.012063][T10472] lowmem_reserve[]: 0 0 0 0 0 [ 304.030369][T10472] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 304.072358][T10516] tc_dump_action: action bad kind [ 304.077552][T10472] Node 0 DMA32: 411*4kB (ME) 1862*8kB (UM) 1373*16kB (UM) 1149*32kB (UM) 614*64kB (UME) 301*128kB (UM) 153*256kB (UME) 76*512kB (UME) 35*1024kB (UME) 8*2048kB (UM) 320*4096kB (UM) = 1594124kB [ 304.132339][T10519] tc_dump_action: action bad kind [ 304.147437][ T27] audit: type=1804 audit(1678431675.936:205): pid=10512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/212/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0 [ 304.162018][T10472] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 304.223414][T10527] tc_dump_action: action bad kind [ 304.254453][T10472] Node 1 Normal: 165*4kB (UE) 27*8kB (UME) 25*16kB (UE) 111*32kB (UME) 31*64kB (UME) 10*128kB (UE) 2*256kB (UE) 0*512kB 2*1024kB (ME) 2*2048kB (UE) 957*4096kB (M) = 3934620kB [ 304.273091][ T27] audit: type=1804 audit(1678431675.986:206): pid=10536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2380528697/syzkaller.5eCnCG/218/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0 [ 304.338271][T10472] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.375980][ T27] audit: type=1804 audit(1678431676.086:207): pid=10527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir776656121/syzkaller.vDkoon/212/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0 [ 304.377929][T10472] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.439197][T10472] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 304.449292][T10472] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 304.476449][T10472] 18827 total pagecache pages [ 304.482173][ T27] audit: type=1804 audit(1678431676.096:208): pid=10516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir366970674/syzkaller.05xvPf/216/cgroup.controllers" dev="sda1" ino=1184 res=1 errno=0 [ 304.501186][T10472] 0 pages in swap cache [ 304.552086][T10472] Free swap = 0kB 07:01:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) 07:01:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) 07:01:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) 07:01:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) [ 304.573526][T10472] Total swap = 0kB [ 304.577376][T10472] 2097051 pages RAM [ 304.588085][T10472] 0 pages HighMem/MovableOnly [ 304.599976][T10472] 392157 pages reserved [ 304.612008][T10472] 0 pages cma reserved [ 304.671444][T10540] tc_dump_action: action bad kind [ 304.699465][T10539] tc_dump_action: action bad kind [ 304.733107][T10543] tc_dump_action: action bad kind [ 304.740150][T10544] tc_dump_action: action bad kind 07:01:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) 07:01:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) [ 304.918894][T10554] tc_dump_action: action bad kind [ 304.961042][ T27] audit: type=1804 audit(1678431676.746:209): pid=10552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2854737855/syzkaller.HxmT5b/213/cgroup.controllers" dev="sda1" ino=1155 res=1 errno=0 [ 304.990006][T10555] tc_dump_action: action bad kind [ 305.041064][ T27] audit: type=1804 audit(1678431676.786:210): pid=10548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir776656121/syzkaller.vDkoon/213/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0 07:01:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 07:01:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) 07:01:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="58056e757c7b3102daffa1ed64a682ac35a5a91806302245224208611112ed7fc8de41201a6353d1b6be4b32f6b34e13e237a9f0b62624d0191610cf44aaa86cbe2c30ad0feb3117b8c4dbb85ff1b12c5503ca9b12ad2688e5ac5aea6d828889f3370fb4f75657771efba3cb6e5c9879bc6db2aea687f83cfacbd47ee4e125238c5d6d6029af48ca50c9dab5c0564b7e715abb0c9fd7fa9c1008330dbf71768aa053ca71bb3bbeaa42b9fa758dcd4cefe9e273aa3aa4c4adcffa1da8df71bc17133bd69b492032776d4bf36bd12939b9ae5e7866f81d127c52dd4aebce04a9605c180edf9f4207a82d06d4785e01f02360b2903a64cef02c1d3e148580d44330026cff", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) [ 305.444275][T10565] tc_dump_action: action bad kind 07:01:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 07:01:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) [ 305.530777][T10567] tc_dump_action: action bad kind [ 305.645047][T10573] tc_dump_action: action bad kind 07:01:17 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x3000, 0x4) 07:01:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000180)=0x9, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 07:01:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0099008100000016000000a4000e80040001008c000300688f99f582121f08fbb32cbd9bfc374ccc19ad8d41697804d90495ee0f45cdb8526eea43267899a175b97431097de0eda0c672f33a61bc64319fa0bc475affa9261e3ae18470a35cccccbc34ff53d1050409211352626df02000e3df393148db16c2f19550a2d927568a5f86400684fa107f5a6eb240d379f674f43366d64502067595e0881f214404000300040001000400010004000100fd020f00260108fe08717385e7655e79b7c3fea90f9ed97f4706ebdeefefc5f5666aa9a41c1683c956a6a638b3f19e391d680e4e62e86ab324fab68e144861fc09c8027b350ef5eb149788be7f3339e36fd166f4b60de7705bcb74c83b17664996115df441503c292766f806c024e6cc2baaa1584c3032e3c69d2fef9e987a9e291de6aefdb22fb08fa0892a07fc65c2b19f0ac9322cc373af4d4e23247e26a121932cc09806f81de98d7477170b51e113501e6f1daa49121f0a55987e8da28219751133ef530b661fa5ed6b50c856c16c34e4545bfba36cde0edd611274e5cc48b717b028dd10043e13505feb488774ebdece67588da8132e181243c1f066d914ba3e5e2fe1b90016918dc003274ebe1b360795a0507b0d9cafbd041afbdf8325402001ffffffffffff05000000ffffffffffff000800000000000008021100000008000000000a19b14148362e36634e0684a8fe0a000802110000010400000008000008021100000033060000350000080211000001020000003800400802110000002c860000ffffffffffff3d00400802110000010002000008021100000005004008021100000109000000ffffffffffff14000008021100000108000000270040ffffffffffff000000000802110000000500400802110000010300000008021100000105004008021100000101000080080211000001000084fc811040ffffffffffff08000000ffffffffffff420000ffffffffffff20000000110000080211000000050000000a00000802110000010600000011004008021100000103000000ffffffffffff150000ffffffffffff330d0000270000ffffffffffff3f0000000c0000080211000000800000003c0040080211000001030000000802110000001300400802110000018a5b0000080211000001070040ffffffffffff6abe0000ffffffffffff3d00000802110000013f0000000c004008021100000005000000080211000000090000ffffffffffff010000000f0040ffffffffffff00000000ffffffffffff170000080211000001ff03000038002a01030000004f000e00800c08000802110000000802110000012bf05ef87dbc2e000700000000000000640062000301240602d70e3c0400fe0cff7206030303030303710700010001020660dd07c1b7ee30edce3e008f000e0080188100080211000001080211000000b43fbab33c21826ccf06000000000000640002000101b603010905218175801b8e9440de0da13b26a73d0fd1958521a02095b35e41d92d1bd84ce084e92a01073c04001fb5062d1a2000003d7900000000000002000800110000000003020000007072060303030303037107ff0101ffff022976060602090000040057000f007206030303030303233194b449ce803534c337e5ffb3d2809ed4313f333e2cfce1302266f9262c69ccea727b2a217249e6dc508badce4db8da8a453c0401d670066804ff0007000301a5710700010101000561004e020e0080acfa00080211000001080211000001505050505050130002000fc10180000000000000080010000006020202020202040601ce010040000602050005e0400f014d089c5b90177138b01eaf0103c03bce8b69ccd43804d64b0f37dc18691dfb769448b10f13eecbc02028feccf5cd9a26b767b646e541eabfb4825c22168b02dca1b3e53b2204534fa29a7d94dfe0e085e41f47933d2b878b804242a45f1ed5c92113ace6d757c4a499921f22938fbad6f52f87ca41f5be216bd1ac9bbc77319e890442ae026f62bd71295d79657078c47a5bfd18fb88ba92a0294261252b79a9d44a62a5f62c49d6ebadbbec973bcaf92d6b190874b47ef9c596e7f70793ca9f195ac1992047fd80470e5af1b69c3d9abdaf61265245ce0a9501a24cd22a01032d1a02000fbe0f211c0000000004001f001100000000087f000000e17206030303030303710701010101ff40007606a10934000900dd18766bed027541462ecfb96d3c80b2061fefa967ff63c2a10edd48e6471685e2dd5227707f3edb3814e40b47ac249be450d9c50f750caaba367a75fe7fb3e431f1a690184a41869f9239f6960c67279b5e691f1ff5510d2741999ebf857490106e1dd0dd8e8dcc3cd9e557a5b5950de59714b27537124b4215fb7571a999f49bd10a49bea15aa59069dc5a1088eaf155650f542ee11cffd9a723a2bc1652087d727cd24878adcd3b2fc5d8c8ccb1460dbf437bf7d5dacd72c7e5c737756be204085a2c6663a781e1dccb8f10b8facede943796a8d7185688774323f1df40a7161eb572f76d6c2316356c18640c87a6e100bb6900000c007f000406adff05000400"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) 07:01:17 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x3000, 0x4) [ 305.902702][T10584] tc_dump_action: action bad kind 07:01:17 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x3000, 0x4) 07:01:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x2, 0x0, 0xf}]}}, &(0x7f0000000200)=""/185, 0x26, 0xb9, 0x1}, 0x20) 07:01:17 executing program 3: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x3000, 0x4) 07:01:17 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) 07:01:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x2, 0x0, 0xf}]}}, &(0x7f0000000200)=""/185, 0x26, 0xb9, 0x1}, 0x20) 07:01:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000003200ffff000000000000000000000034000100300001000b000100706f6c696365000004000280040006000c00070000000000"], 0x48}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r5, @ANYBLOB="07002abd7000ffdbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000100000069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000e40)=ANY=[@ANYBLOB="60077146ad2c2cf5d583392fffd20b3a3c52daa9019c6a132dabc34855eadc4ef0f509a26942c6901e3b73f6a272aeb2cc01d3f155aa7ded3062bdbe521a64c749d930ed6d23eebadfb0eac79eead7a12adaf49a44428973f2be30906e34a8a3ad8d14e3efefd616f6f1a2878957d0247cd914e24d08cce7b674a9593936cbc4d75d9e15e14ab7eda05c8ae98937078d812ef58b0522", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250e00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x760}, 0x1, 0x0, 0x0, 0x41}, 0x60040885) sendto$packet(r1, &(0x7f0000000680)="110000000000080000000082d95c", 0xe, 0x0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0f000c00000004000900030004000a0004000a0004000a00"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) r7 = socket(0x840000000002, 0x3, 0xff) connect$inet(r7, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r7, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x75}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600c001}, 0x8001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000950000000000000000000000b217fcf90f783e19a2c48902eb01002731a99861822f8b0000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r12}, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r10, r9, 0x0, 0x100004001) [ 306.215601][T10598] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 306.274137][T10598] [ 306.285821][T10598] ====================================================== [ 306.293033][T10598] WARNING: possible circular locking dependency detected [ 306.300061][T10598] 6.2.0-syzkaller-13008-gdb47fa2e4cbf #0 Not tainted [ 306.306753][T10598] ------------------------------------------------------ [ 306.313795][T10598] syz-executor.5/10598 is trying to acquire lock: 07:01:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:18 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) [ 306.320401][T10598] ffff888144c68400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_bmap+0x52/0x470 [ 306.330119][T10598] [ 306.330119][T10598] but task is already holding lock: [ 306.337534][T10598] ffff88814b8be3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x47f/0xc90 [ 306.348260][T10598] [ 306.348260][T10598] which lock already depends on the new lock. [ 306.348260][T10598] [ 306.358670][T10598] [ 306.358670][T10598] the existing dependency chain (in reverse order) is: [ 306.367698][T10598] [ 306.367698][T10598] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 306.376510][T10598] mutex_lock_io_nested+0x143/0x11a0 [ 306.382420][T10598] __jbd2_log_wait_for_space+0x238/0x4b0 [ 306.388737][T10598] add_transaction_credits+0xa2d/0xb70 [ 306.394725][T10598] start_this_handle+0x3ae/0x14e0 [ 306.400360][T10598] jbd2__journal_start+0x39d/0x9d0 [ 306.406177][T10598] __ext4_journal_start_sb+0x706/0x890 [ 306.412187][T10598] ext4_handle_inode_extension+0x314/0x890 [ 306.418524][T10598] ext4_file_write_iter+0x1268/0x1710 [ 306.424435][T10598] do_iter_readv_writev+0x20b/0x3b0 [ 306.430177][T10598] do_iter_write+0x182/0x700 [ 306.435305][T10598] vfs_iter_write+0x74/0xa0 [ 306.440333][T10598] iter_file_splice_write+0x743/0xc80 [ 306.446230][T10598] direct_splice_actor+0x114/0x180 [ 306.451885][T10598] splice_direct_to_actor+0x335/0x8a0 [ 306.457781][T10598] do_splice_direct+0x1ab/0x280 [ 306.463152][T10598] do_sendfile+0xb19/0x12c0 [ 306.468192][T10598] __x64_sys_sendfile64+0x1d0/0x210 [ 306.473913][T10598] do_syscall_64+0x39/0xb0 [ 306.478860][T10598] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 306.485271][T10598] [ 306.485271][T10598] -> #0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 306.493877][T10598] __lock_acquire+0x2ec7/0x5d40 [ 306.499250][T10598] lock_acquire+0x1e3/0x670 [ 306.504289][T10598] down_read+0x3d/0x50 [ 306.508883][T10598] ext4_bmap+0x52/0x470 [ 306.513565][T10598] bmap+0xae/0x120 [ 306.517967][T10598] jbd2_journal_bmap+0xac/0x1c0 [ 306.523343][T10598] jbd2_journal_flush+0x87b/0xc90 [ 306.528983][T10598] __ext4_ioctl+0xb3f/0x4c90 [ 306.534108][T10598] __x64_sys_ioctl+0x197/0x210 [ 306.539392][T10598] do_syscall_64+0x39/0xb0 [ 306.544499][T10598] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 306.550920][T10598] [ 306.550920][T10598] other info that might help us debug this: [ 306.550920][T10598] [ 306.561155][T10598] Possible unsafe locking scenario: [ 306.561155][T10598] [ 306.568612][T10598] CPU0 CPU1 [ 306.573971][T10598] ---- ---- [ 306.579329][T10598] lock(&journal->j_checkpoint_mutex); [ 306.584869][T10598] lock(&sb->s_type->i_mutex_key#8); [ 306.592780][T10598] lock(&journal->j_checkpoint_mutex); [ 306.600840][T10598] lock(&sb->s_type->i_mutex_key#8); [ 306.606302][T10598] [ 306.606302][T10598] *** DEADLOCK *** [ 306.606302][T10598] [ 306.614434][T10598] 2 locks held by syz-executor.5/10598: [ 306.619975][T10598] #0: ffff88814b8be170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x162/0x310 [ 306.630871][T10598] #1: ffff88814b8be3f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x47f/0xc90 [ 306.641937][T10598] [ 306.641937][T10598] stack backtrace: [ 306.647814][T10598] CPU: 1 PID: 10598 Comm: syz-executor.5 Not tainted 6.2.0-syzkaller-13008-gdb47fa2e4cbf #0 [ 306.657871][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 306.667929][T10598] Call Trace: [ 306.671206][T10598] [ 306.674133][T10598] dump_stack_lvl+0xd9/0x150 [ 306.678738][T10598] check_noncircular+0x25f/0x2e0 [ 306.683689][T10598] ? print_circular_bug+0x5c0/0x5c0 [ 306.688948][T10598] ? __switch_to+0x5d0/0x1110 [ 306.693644][T10598] ? mark_lock.part.0+0xee/0x1970 [ 306.698678][T10598] ? print_usage_bug.part.0+0x660/0x660 [ 306.704228][T10598] __lock_acquire+0x2ec7/0x5d40 [ 306.709083][T10598] ? __wait_on_bit+0xd4/0x180 [ 306.713768][T10598] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 306.719751][T10598] lock_acquire+0x1e3/0x670 [ 306.724254][T10598] ? ext4_bmap+0x52/0x470 [ 306.728586][T10598] ? out_of_line_wait_on_bit_timeout+0x170/0x170 [ 306.734921][T10598] ? lock_release+0x780/0x780 [ 306.739606][T10598] down_read+0x3d/0x50 [ 306.743670][T10598] ? ext4_bmap+0x52/0x470 [ 306.748012][T10598] ext4_bmap+0x52/0x470 [ 306.752173][T10598] ? mpage_release_unused_pages+0x870/0x870 [ 306.758075][T10598] bmap+0xae/0x120 [ 306.761802][T10598] ? do_raw_read_unlock+0xe0/0xe0 [ 306.766834][T10598] jbd2_journal_bmap+0xac/0x1c0 [ 306.771689][T10598] ? jbd2_log_start_commit+0x50/0x50 [ 306.776976][T10598] ? _raw_write_unlock+0x28/0x40 [ 306.781935][T10598] ? jbd2_mark_journal_empty+0x307/0x3f0 [ 306.787586][T10598] jbd2_journal_flush+0x87b/0xc90 [ 306.792618][T10598] ? jbd2_fc_get_buf+0x310/0x310 [ 306.797558][T10598] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 306.803367][T10598] ? __ext4_ioctl+0x3ca2/0x4c90 [ 306.808246][T10598] __ext4_ioctl+0xb3f/0x4c90 [ 306.812853][T10598] ? tomoyo_path_number_perm+0x166/0x570 [ 306.818502][T10598] ? ext4_reset_inode_seed+0x450/0x450 [ 306.823975][T10598] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 306.830715][T10598] ? do_vfs_ioctl+0x132/0x1670 [ 306.835564][T10598] ? vfs_fileattr_set+0xc40/0xc40 [ 306.840594][T10598] ? xfd_validate_state+0x5d/0x180 [ 306.845711][T10598] ? __fget_files+0x26a/0x480 [ 306.850410][T10598] ? ext4_fileattr_set+0x1a50/0x1a50 [ 306.855708][T10598] __x64_sys_ioctl+0x197/0x210 [ 306.860499][T10598] do_syscall_64+0x39/0xb0 [ 306.864927][T10598] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 306.870833][T10598] RIP: 0033:0x7f4489e8c0f9 [ 306.875262][T10598] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 306.894871][T10598] RSP: 002b:00007f448ab32168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 306.903297][T10598] RAX: ffffffffffffffda RBX: 00007f4489fabf80 RCX: 00007f4489e8c0f9 [ 306.911266][T10598] RDX: 0000000020000000 RSI: 000000004004662b RDI: 0000000000000003 [ 306.919255][T10598] RBP: 00007f4489ee7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 306.927484][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.935452][T10598] R13: 00007fff6057195f R14: 00007f448ab32300 R15: 0000000000022000 [ 306.943449][T10598] 07:01:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x2, 0x0, 0xf}]}}, &(0x7f0000000200)=""/185, 0x26, 0xb9, 0x1}, 0x20) 07:01:18 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) 07:01:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x2, 0x0, 0xf}]}}, &(0x7f0000000200)=""/185, 0x26, 0xb9, 0x1}, 0x20) 07:01:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) [ 307.137789][T10611] __nla_validate_parse: 26 callbacks suppressed [ 307.137807][T10611] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. 07:01:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) [ 307.156062][T10610] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 307.183206][T10611] tc_dump_action: action bad kind [ 307.219470][T10611] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. 07:01:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) [ 307.418362][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 307.418378][ T27] audit: type=1804 audit(1678431679.206:219): pid=10611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir65001798/syzkaller.FxxHx5/231/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0 07:01:19 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 07:01:19 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) 07:01:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 07:01:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 07:01:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) 07:01:19 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 07:01:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:19 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) [ 307.973276][T10637] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 07:01:20 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 07:01:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:20 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) 07:01:20 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:20 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) [ 308.268002][T10669] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 07:01:20 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) [ 308.898469][T10676] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 07:01:21 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 07:01:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000c80)="390000001300090468fe0700000000000000ff3f04000000c10100100000000018002b000a00020014a45868b3fe79a10d6500000000007200", 0x39}], 0x1) 07:01:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001800)={{{@in6=@dev, @in=@dev}}, {{@in=@initdev}, 0x0, @in6=@private1}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f1"], 0x20000600}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000e40)={0xffffffffffffffff, 0x3, 0x400, 0x8}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x2}, 0x20) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e80), &(0x7f0000000ec0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xe5}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 07:01:21 executing program 4: syz_emit_ethernet(0xc2, &(0x7f00000000c0)={@random="fb6f1f72ceda", @random='\x00i\b\x00', @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "a44da1", 0x88, 0x11, 0x0, @ipv4, @mcast2, {[@srh={0x0, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @dev]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 07:01:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) 07:01:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) 07:01:21 executing program 4: syz_emit_ethernet(0xc2, &(0x7f00000000c0)={@random="fb6f1f72ceda", @random='\x00i\b\x00', @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "a44da1", 0x88, 0x11, 0x0, @ipv4, @mcast2, {[@srh={0x0, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @dev]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) [ 309.073472][T10694] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 309.773591][T10701] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.780871][T10704] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 309.785616][T10705] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow 07:01:21 executing program 2: socket(0x2, 0x0, 0x0) 07:01:21 executing program 4: syz_emit_ethernet(0xc2, &(0x7f00000000c0)={@random="fb6f1f72ceda", @random='\x00i\b\x00', @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "a44da1", 0x88, 0x11, 0x0, @ipv4, @mcast2, {[@srh={0x0, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @dev]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 07:01:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000c80)="390000001300090468fe0700000000000000ff3f04000000c10100100000000018002b000a00020014a45868b3fe79a10d6500000000007200", 0x39}], 0x1) [ 309.813520][T10701] gretap0: entered promiscuous mode [ 309.833953][T10701] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 309.845549][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 07:01:21 executing program 4: syz_emit_ethernet(0xc2, &(0x7f00000000c0)={@random="fb6f1f72ceda", @random='\x00i\b\x00', @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "a44da1", 0x88, 0x11, 0x0, @ipv4, @mcast2, {[@srh={0x0, 0xe, 0x4, 0x7, 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @dev]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) 07:01:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) [ 309.939131][T10714] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.997749][T10714] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 310.022958][T10722] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 310.048537][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 07:01:22 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)) 07:01:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14}, 0x35000}}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x38, 0x0) 07:01:22 executing program 2: socket(0x2, 0x0, 0x0) 07:01:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000c80)="390000001300090468fe0700000000000000ff3f04000000c10100100000000018002b000a00020014a45868b3fe79a10d6500000000007200", 0x39}], 0x1) 07:01:22 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:22 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x10d, 0x11, &(0x7f0000000040)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x8) 07:01:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14}, 0x35000}}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x38, 0x0) 07:01:22 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:22 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000c80)="390000001300090468fe0700000000000000ff3f04000000c10100100000000018002b000a00020014a45868b3fe79a10d6500000000007200", 0x39}], 0x1) [ 310.684035][T10735] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.694137][T10734] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 310.694500][T10735] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 310.713488][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 07:01:22 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x10d, 0x11, &(0x7f0000000040)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x8) 07:01:22 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x10d, 0x11, &(0x7f0000000040)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x8) 07:01:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14}, 0x35000}}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x38, 0x0) [ 310.803837][T10745] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.834851][T10745] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 07:01:22 executing program 3: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x10d, 0x11, &(0x7f0000000040)=@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x8) [ 310.870514][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 07:01:22 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:22 executing program 2: socket(0x2, 0x0, 0x0) 07:01:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14}, 0x35000}}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x38, 0x0) 07:01:22 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:22 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:22 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:22 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:22 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:22 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:22 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:22 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:23 executing program 2: socket(0x2, 0x0, 0x0) 07:01:23 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:23 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:23 executing program 5: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:23 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:23 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:23 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14}, 0x35000}}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x38, 0x0) 07:01:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14}, 0x35000}}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x38, 0x0) 07:01:23 executing program 5: r0 = bpf$MAP_CREATE(0x600000000000000, &(0x7f00000002c0)=@base={0x3, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) 07:01:23 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14}, 0x35000}}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x38, 0x0) 07:01:23 executing program 5: r0 = bpf$MAP_CREATE(0x600000000000000, &(0x7f00000002c0)=@base={0x3, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) 07:01:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14}, 0x35000}}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x38, 0x0) 07:01:23 executing program 3: r0 = bpf$MAP_CREATE(0x600000000000000, &(0x7f00000002c0)=@base={0x3, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) 07:01:23 executing program 5: r0 = bpf$MAP_CREATE(0x600000000000000, &(0x7f00000002c0)=@base={0x3, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) 07:01:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0xa, 0x0, 0x1000, @private2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)='e', 0x1}], 0x1, &(0x7f0000000300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdr={{0x18}}], 0x30}, 0x24000040) 07:01:23 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14}, 0x35000}}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x38, 0x0) 07:01:23 executing program 3: r0 = bpf$MAP_CREATE(0x600000000000000, &(0x7f00000002c0)=@base={0x3, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) 07:01:23 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x3) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14}, 0x35000}}, 0x0) recvmsg$qrtr(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x38, 0x0) 07:01:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0xa, 0x0, 0x1000, @private2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)='e', 0x1}], 0x1, &(0x7f0000000300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdr={{0x18}}], 0x30}, 0x24000040) 07:01:23 executing program 5: r0 = bpf$MAP_CREATE(0x600000000000000, &(0x7f00000002c0)=@base={0x3, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) 07:01:23 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) socket(0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0xb7}, 0x40000110) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xf, 0x0, &(0x7f0000000340)="5cdd3086ddffff6633c9bbac88a886", 0x0, 0x400e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 07:01:23 executing program 3: r0 = bpf$MAP_CREATE(0x600000000000000, &(0x7f00000002c0)=@base={0x3, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000240)={r0, &(0x7f0000000340), &(0x7f0000000440)}, 0x20) 07:01:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0xa, 0x0, 0x1000, @private2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)='e', 0x1}], 0x1, &(0x7f0000000300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdr={{0x18}}], 0x30}, 0x24000040) 07:01:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x5, 0x400, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x102}, 0x48) 07:01:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000000)=0x88) 07:01:23 executing program 3: r0 = socket(0x2, 0x3, 0x80000000002) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) socket(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x77) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x40f8, 0x4) recvmmsg$unix(r0, &(0x7f0000000e40), 0x40003ac, 0x2, 0x0) 07:01:23 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0xa, 0x0, 0x1000, @private2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)='e', 0x1}], 0x1, &(0x7f0000000300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @rthdr={{0x18}}], 0x30}, 0x24000040) 07:01:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000000)=0x88) 07:01:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000000)=0x88) [ 311.979777][T10852] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 07:01:23 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x5, 0x400, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x102}, 0x48) 07:01:23 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000000)=0x88) 07:01:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:23 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:24 executing program 3: r0 = socket(0x2, 0x3, 0x80000000002) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) socket(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x77) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x40f8, 0x4) recvmmsg$unix(r0, &(0x7f0000000e40), 0x40003ac, 0x2, 0x0) 07:01:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:24 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:24 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x5, 0x400, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x102}, 0x48) 07:01:24 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:25 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:25 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020094, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendto$inet(r0, &(0x7f0000000200)='+', 0x1, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) 07:01:25 executing program 0: r0 = socket(0x2, 0x3, 0x80000000002) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) socket(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x77) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x40f8, 0x4) recvmmsg$unix(r0, &(0x7f0000000e40), 0x40003ac, 0x2, 0x0) 07:01:25 executing program 1: r0 = socket(0x2, 0x3, 0x80000000002) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) socket(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x77) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x40f8, 0x4) recvmmsg$unix(r0, &(0x7f0000000e40), 0x40003ac, 0x2, 0x0) 07:01:25 executing program 4: r0 = socket(0x2, 0x3, 0x80000000002) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) socket(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x77) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x40f8, 0x4) recvmmsg$unix(r0, &(0x7f0000000e40), 0x40003ac, 0x2, 0x0) 07:01:25 executing program 2: r0 = socket(0x2, 0x3, 0x80000000002) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) socket(0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x77) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x40f8, 0x4) recvmmsg$unix(r0, &(0x7f0000000e40), 0x40003ac, 0x2, 0x0)