[ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.37' (ECDSA) to the list of known hosts. 2021/10/18 14:53:47 fuzzer started 2021/10/18 14:53:48 dialing manager at 10.128.0.169:45165 2021/10/18 14:53:48 syscalls: 1698 2021/10/18 14:53:48 code coverage: enabled 2021/10/18 14:53:48 comparison tracing: enabled 2021/10/18 14:53:48 extra coverage: enabled 2021/10/18 14:53:48 setuid sandbox: enabled 2021/10/18 14:53:48 namespace sandbox: enabled 2021/10/18 14:53:48 Android sandbox: /sys/fs/selinux/policy does not exist 2021/10/18 14:53:48 fault injection: enabled 2021/10/18 14:53:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/10/18 14:53:48 net packet injection: enabled 2021/10/18 14:53:48 net device setup: enabled 2021/10/18 14:53:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/10/18 14:53:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/10/18 14:53:48 USB emulation: enabled 2021/10/18 14:53:48 hci packet injection: enabled 2021/10/18 14:53:48 wifi device emulation: enabled 2021/10/18 14:53:48 802.15.4 emulation: enabled 2021/10/18 14:53:48 fetching corpus: 0, signal 0/2000 (executing program) syzkaller login: [ 68.386032][ T6564] cgroup: Unknown subsys name 'net' [ 68.398111][ T6564] cgroup: Unknown subsys name 'rlimit' 2021/10/18 14:53:48 fetching corpus: 50, signal 37944/41490 (executing program) 2021/10/18 14:53:48 fetching corpus: 100, signal 50161/55305 (executing program) 2021/10/18 14:53:49 fetching corpus: 150, signal 60222/66814 (executing program) 2021/10/18 14:53:49 fetching corpus: 200, signal 67600/75671 (executing program) 2021/10/18 14:53:49 fetching corpus: 250, signal 73059/82540 (executing program) 2021/10/18 14:53:49 fetching corpus: 300, signal 77864/88685 (executing program) 2021/10/18 14:53:49 fetching corpus: 350, signal 84285/96374 (executing program) 2021/10/18 14:53:49 fetching corpus: 400, signal 89699/103011 (executing program) 2021/10/18 14:53:49 fetching corpus: 450, signal 93476/108051 (executing program) 2021/10/18 14:53:49 fetching corpus: 500, signal 99214/114889 (executing program) 2021/10/18 14:53:50 fetching corpus: 550, signal 102160/119120 (executing program) 2021/10/18 14:53:50 fetching corpus: 600, signal 105564/123629 (executing program) 2021/10/18 14:53:50 fetching corpus: 650, signal 108134/127422 (executing program) 2021/10/18 14:53:50 fetching corpus: 700, signal 110824/131263 (executing program) 2021/10/18 14:53:50 fetching corpus: 750, signal 113287/134854 (executing program) 2021/10/18 14:53:50 fetching corpus: 800, signal 115757/138424 (executing program) 2021/10/18 14:53:50 fetching corpus: 850, signal 118151/141919 (executing program) 2021/10/18 14:53:51 fetching corpus: 900, signal 119939/144797 (executing program) 2021/10/18 14:53:51 fetching corpus: 950, signal 121933/147848 (executing program) 2021/10/18 14:53:51 fetching corpus: 1000, signal 123434/150480 (executing program) [ 71.183210][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.189875][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 2021/10/18 14:53:51 fetching corpus: 1050, signal 126388/154390 (executing program) 2021/10/18 14:53:51 fetching corpus: 1100, signal 127928/157038 (executing program) 2021/10/18 14:53:51 fetching corpus: 1150, signal 130414/160449 (executing program) 2021/10/18 14:53:51 fetching corpus: 1200, signal 133276/164182 (executing program) 2021/10/18 14:53:52 fetching corpus: 1250, signal 134985/166895 (executing program) 2021/10/18 14:53:52 fetching corpus: 1300, signal 136819/169698 (executing program) 2021/10/18 14:53:52 fetching corpus: 1350, signal 138632/172379 (executing program) 2021/10/18 14:53:52 fetching corpus: 1400, signal 140121/174842 (executing program) 2021/10/18 14:53:52 fetching corpus: 1450, signal 141688/177351 (executing program) 2021/10/18 14:53:52 fetching corpus: 1500, signal 143695/180176 (executing program) 2021/10/18 14:53:52 fetching corpus: 1550, signal 145340/182671 (executing program) 2021/10/18 14:53:52 fetching corpus: 1600, signal 146821/185027 (executing program) 2021/10/18 14:53:52 fetching corpus: 1650, signal 148152/187304 (executing program) 2021/10/18 14:53:53 fetching corpus: 1700, signal 149841/189785 (executing program) 2021/10/18 14:53:53 fetching corpus: 1750, signal 151968/192613 (executing program) 2021/10/18 14:53:53 fetching corpus: 1800, signal 153335/194788 (executing program) 2021/10/18 14:53:53 fetching corpus: 1850, signal 154967/197147 (executing program) 2021/10/18 14:53:53 fetching corpus: 1900, signal 155942/199015 (executing program) 2021/10/18 14:53:53 fetching corpus: 1950, signal 157999/201683 (executing program) 2021/10/18 14:53:53 fetching corpus: 2000, signal 159124/203609 (executing program) 2021/10/18 14:53:54 fetching corpus: 2050, signal 160284/205586 (executing program) 2021/10/18 14:53:54 fetching corpus: 2099, signal 161351/207460 (executing program) 2021/10/18 14:53:54 fetching corpus: 2149, signal 162878/209653 (executing program) 2021/10/18 14:53:54 fetching corpus: 2199, signal 164391/211845 (executing program) 2021/10/18 14:53:54 fetching corpus: 2249, signal 166168/214250 (executing program) 2021/10/18 14:53:54 fetching corpus: 2298, signal 167390/216136 (executing program) 2021/10/18 14:53:54 fetching corpus: 2348, signal 168579/218014 (executing program) 2021/10/18 14:53:55 fetching corpus: 2398, signal 169646/219835 (executing program) 2021/10/18 14:53:55 fetching corpus: 2448, signal 171153/221986 (executing program) 2021/10/18 14:53:55 fetching corpus: 2498, signal 172094/223700 (executing program) 2021/10/18 14:53:55 fetching corpus: 2548, signal 173144/225449 (executing program) 2021/10/18 14:53:55 fetching corpus: 2598, signal 174264/227270 (executing program) 2021/10/18 14:53:55 fetching corpus: 2648, signal 175249/228937 (executing program) 2021/10/18 14:53:55 fetching corpus: 2697, signal 176348/230683 (executing program) 2021/10/18 14:53:55 fetching corpus: 2747, signal 177974/232779 (executing program) 2021/10/18 14:53:56 fetching corpus: 2797, signal 178716/234270 (executing program) 2021/10/18 14:53:56 fetching corpus: 2847, signal 179634/235807 (executing program) 2021/10/18 14:53:56 fetching corpus: 2897, signal 180759/237530 (executing program) 2021/10/18 14:53:56 fetching corpus: 2947, signal 181665/239125 (executing program) 2021/10/18 14:53:56 fetching corpus: 2997, signal 182530/240630 (executing program) 2021/10/18 14:53:56 fetching corpus: 3046, signal 183413/242135 (executing program) 2021/10/18 14:53:56 fetching corpus: 3096, signal 184351/243738 (executing program) 2021/10/18 14:53:57 fetching corpus: 3146, signal 185578/245477 (executing program) 2021/10/18 14:53:57 fetching corpus: 3195, signal 186516/246993 (executing program) 2021/10/18 14:53:57 fetching corpus: 3245, signal 187821/248753 (executing program) 2021/10/18 14:53:57 fetching corpus: 3295, signal 188742/250206 (executing program) 2021/10/18 14:53:57 fetching corpus: 3345, signal 189852/251778 (executing program) 2021/10/18 14:53:57 fetching corpus: 3395, signal 190790/253217 (executing program) 2021/10/18 14:53:57 fetching corpus: 3445, signal 191934/254811 (executing program) 2021/10/18 14:53:58 fetching corpus: 3494, signal 192802/256171 (executing program) 2021/10/18 14:53:58 fetching corpus: 3544, signal 193842/257710 (executing program) 2021/10/18 14:53:58 fetching corpus: 3594, signal 194697/259132 (executing program) 2021/10/18 14:53:58 fetching corpus: 3644, signal 195769/260618 (executing program) 2021/10/18 14:53:58 fetching corpus: 3694, signal 196704/262080 (executing program) 2021/10/18 14:53:58 fetching corpus: 3744, signal 197725/263503 (executing program) 2021/10/18 14:53:58 fetching corpus: 3794, signal 198607/264829 (executing program) 2021/10/18 14:53:58 fetching corpus: 3844, signal 199501/266164 (executing program) 2021/10/18 14:53:59 fetching corpus: 3893, signal 200504/267561 (executing program) 2021/10/18 14:53:59 fetching corpus: 3943, signal 201262/268810 (executing program) 2021/10/18 14:53:59 fetching corpus: 3993, signal 202469/270286 (executing program) 2021/10/18 14:53:59 fetching corpus: 4043, signal 203436/271646 (executing program) 2021/10/18 14:53:59 fetching corpus: 4092, signal 204070/272814 (executing program) 2021/10/18 14:53:59 fetching corpus: 4141, signal 205073/274145 (executing program) 2021/10/18 14:53:59 fetching corpus: 4191, signal 205944/275423 (executing program) 2021/10/18 14:54:00 fetching corpus: 4241, signal 206723/276654 (executing program) 2021/10/18 14:54:00 fetching corpus: 4291, signal 207839/278001 (executing program) 2021/10/18 14:54:00 fetching corpus: 4341, signal 208587/279202 (executing program) 2021/10/18 14:54:00 fetching corpus: 4391, signal 209411/280402 (executing program) 2021/10/18 14:54:00 fetching corpus: 4441, signal 209998/281487 (executing program) 2021/10/18 14:54:00 fetching corpus: 4491, signal 210674/282594 (executing program) 2021/10/18 14:54:00 fetching corpus: 4541, signal 211461/283737 (executing program) 2021/10/18 14:54:01 fetching corpus: 4591, signal 212237/284869 (executing program) 2021/10/18 14:54:01 fetching corpus: 4641, signal 213272/286117 (executing program) 2021/10/18 14:54:01 fetching corpus: 4691, signal 214037/287263 (executing program) 2021/10/18 14:54:01 fetching corpus: 4741, signal 214624/288334 (executing program) 2021/10/18 14:54:01 fetching corpus: 4791, signal 215403/289426 (executing program) 2021/10/18 14:54:01 fetching corpus: 4839, signal 216316/290587 (executing program) 2021/10/18 14:54:01 fetching corpus: 4888, signal 216812/291589 (executing program) 2021/10/18 14:54:02 fetching corpus: 4938, signal 217656/292752 (executing program) 2021/10/18 14:54:02 fetching corpus: 4988, signal 218544/293901 (executing program) 2021/10/18 14:54:02 fetching corpus: 5038, signal 219293/294927 (executing program) 2021/10/18 14:54:02 fetching corpus: 5088, signal 220084/296023 (executing program) 2021/10/18 14:54:02 fetching corpus: 5137, signal 220676/297035 (executing program) 2021/10/18 14:54:02 fetching corpus: 5186, signal 221410/298050 (executing program) 2021/10/18 14:54:02 fetching corpus: 5236, signal 222228/299162 (executing program) 2021/10/18 14:54:02 fetching corpus: 5286, signal 222667/300037 (executing program) 2021/10/18 14:54:03 fetching corpus: 5336, signal 223347/300994 (executing program) 2021/10/18 14:54:03 fetching corpus: 5386, signal 223926/301947 (executing program) 2021/10/18 14:54:03 fetching corpus: 5436, signal 224470/302850 (executing program) 2021/10/18 14:54:03 fetching corpus: 5485, signal 225022/303768 (executing program) 2021/10/18 14:54:03 fetching corpus: 5535, signal 225550/304671 (executing program) 2021/10/18 14:54:03 fetching corpus: 5585, signal 226154/305583 (executing program) 2021/10/18 14:54:03 fetching corpus: 5635, signal 226943/306548 (executing program) 2021/10/18 14:54:03 fetching corpus: 5684, signal 227453/307428 (executing program) 2021/10/18 14:54:04 fetching corpus: 5734, signal 228030/308319 (executing program) 2021/10/18 14:54:04 fetching corpus: 5784, signal 228790/309231 (executing program) 2021/10/18 14:54:04 fetching corpus: 5834, signal 229419/310139 (executing program) 2021/10/18 14:54:04 fetching corpus: 5884, signal 230086/310995 (executing program) 2021/10/18 14:54:04 fetching corpus: 5934, signal 230722/311860 (executing program) 2021/10/18 14:54:04 fetching corpus: 5984, signal 231402/312712 (executing program) 2021/10/18 14:54:05 fetching corpus: 6032, signal 232291/313668 (executing program) 2021/10/18 14:54:05 fetching corpus: 6082, signal 233447/314684 (executing program) 2021/10/18 14:54:05 fetching corpus: 6132, signal 234166/315507 (executing program) 2021/10/18 14:54:05 fetching corpus: 6181, signal 234919/316383 (executing program) 2021/10/18 14:54:05 fetching corpus: 6231, signal 235412/317155 (executing program) 2021/10/18 14:54:05 fetching corpus: 6281, signal 236027/317973 (executing program) 2021/10/18 14:54:05 fetching corpus: 6331, signal 236464/318719 (executing program) 2021/10/18 14:54:05 fetching corpus: 6381, signal 236902/319475 (executing program) 2021/10/18 14:54:06 fetching corpus: 6431, signal 237346/320207 (executing program) 2021/10/18 14:54:06 fetching corpus: 6480, signal 237868/320988 (executing program) 2021/10/18 14:54:06 fetching corpus: 6530, signal 238271/321721 (executing program) 2021/10/18 14:54:06 fetching corpus: 6580, signal 238888/322489 (executing program) 2021/10/18 14:54:06 fetching corpus: 6630, signal 239475/323232 (executing program) 2021/10/18 14:54:06 fetching corpus: 6680, signal 240126/324013 (executing program) 2021/10/18 14:54:06 fetching corpus: 6730, signal 240566/324761 (executing program) 2021/10/18 14:54:07 fetching corpus: 6780, signal 241050/325485 (executing program) 2021/10/18 14:54:07 fetching corpus: 6829, signal 241856/326289 (executing program) 2021/10/18 14:54:07 fetching corpus: 6879, signal 242384/326990 (executing program) 2021/10/18 14:54:07 fetching corpus: 6929, signal 242853/327692 (executing program) 2021/10/18 14:54:07 fetching corpus: 6978, signal 243448/328403 (executing program) 2021/10/18 14:54:07 fetching corpus: 7028, signal 243880/329079 (executing program) 2021/10/18 14:54:07 fetching corpus: 7078, signal 244401/329786 (executing program) 2021/10/18 14:54:08 fetching corpus: 7127, signal 244862/330457 (executing program) 2021/10/18 14:54:08 fetching corpus: 7177, signal 245336/331120 (executing program) 2021/10/18 14:54:08 fetching corpus: 7227, signal 246028/331824 (executing program) 2021/10/18 14:54:08 fetching corpus: 7277, signal 246502/332496 (executing program) 2021/10/18 14:54:08 fetching corpus: 7327, signal 246886/333129 (executing program) 2021/10/18 14:54:08 fetching corpus: 7377, signal 247389/333777 (executing program) 2021/10/18 14:54:08 fetching corpus: 7427, signal 247917/334432 (executing program) 2021/10/18 14:54:08 fetching corpus: 7477, signal 248395/335062 (executing program) 2021/10/18 14:54:09 fetching corpus: 7527, signal 248831/335682 (executing program) 2021/10/18 14:54:09 fetching corpus: 7577, signal 249223/336306 (executing program) 2021/10/18 14:54:09 fetching corpus: 7627, signal 249575/336894 (executing program) 2021/10/18 14:54:09 fetching corpus: 7676, signal 249927/337488 (executing program) 2021/10/18 14:54:09 fetching corpus: 7726, signal 250326/338063 (executing program) 2021/10/18 14:54:09 fetching corpus: 7775, signal 250699/338641 (executing program) 2021/10/18 14:54:09 fetching corpus: 7825, signal 251128/339272 (executing program) 2021/10/18 14:54:09 fetching corpus: 7875, signal 251547/339847 (executing program) 2021/10/18 14:54:10 fetching corpus: 7925, signal 251901/340456 (executing program) 2021/10/18 14:54:10 fetching corpus: 7975, signal 252286/341055 (executing program) 2021/10/18 14:54:10 fetching corpus: 8025, signal 252736/341636 (executing program) 2021/10/18 14:54:10 fetching corpus: 8075, signal 253121/342227 (executing program) 2021/10/18 14:54:10 fetching corpus: 8125, signal 253458/342777 (executing program) 2021/10/18 14:54:10 fetching corpus: 8175, signal 253932/343363 (executing program) 2021/10/18 14:54:10 fetching corpus: 8224, signal 254670/343956 (executing program) 2021/10/18 14:54:10 fetching corpus: 8274, signal 255212/344525 (executing program) 2021/10/18 14:54:11 fetching corpus: 8324, signal 255660/345077 (executing program) 2021/10/18 14:54:11 fetching corpus: 8374, signal 256258/345621 (executing program) 2021/10/18 14:54:11 fetching corpus: 8424, signal 256739/346144 (executing program) 2021/10/18 14:54:11 fetching corpus: 8473, signal 257128/346673 (executing program) 2021/10/18 14:54:11 fetching corpus: 8523, signal 257511/347209 (executing program) 2021/10/18 14:54:11 fetching corpus: 8573, signal 258117/347762 (executing program) 2021/10/18 14:54:11 fetching corpus: 8623, signal 258491/348292 (executing program) 2021/10/18 14:54:12 fetching corpus: 8672, signal 258874/348399 (executing program) 2021/10/18 14:54:12 fetching corpus: 8722, signal 259263/348399 (executing program) 2021/10/18 14:54:12 fetching corpus: 8771, signal 259701/348399 (executing program) 2021/10/18 14:54:12 fetching corpus: 8821, signal 260360/348400 (executing program) 2021/10/18 14:54:12 fetching corpus: 8871, signal 260769/348400 (executing program) 2021/10/18 14:54:12 fetching corpus: 8921, signal 261331/348400 (executing program) 2021/10/18 14:54:12 fetching corpus: 8971, signal 261887/348401 (executing program) 2021/10/18 14:54:13 fetching corpus: 9021, signal 262464/348401 (executing program) 2021/10/18 14:54:13 fetching corpus: 9070, signal 262826/348401 (executing program) 2021/10/18 14:54:13 fetching corpus: 9120, signal 263200/348403 (executing program) 2021/10/18 14:54:13 fetching corpus: 9170, signal 263620/348420 (executing program) 2021/10/18 14:54:13 fetching corpus: 9220, signal 263965/348420 (executing program) 2021/10/18 14:54:13 fetching corpus: 9269, signal 264379/348420 (executing program) 2021/10/18 14:54:13 fetching corpus: 9319, signal 264845/348420 (executing program) 2021/10/18 14:54:14 fetching corpus: 9369, signal 265393/348420 (executing program) 2021/10/18 14:54:14 fetching corpus: 9419, signal 265724/348420 (executing program) 2021/10/18 14:54:14 fetching corpus: 9469, signal 266172/348420 (executing program) 2021/10/18 14:54:14 fetching corpus: 9518, signal 266547/348420 (executing program) 2021/10/18 14:54:14 fetching corpus: 9568, signal 266891/348420 (executing program) 2021/10/18 14:54:14 fetching corpus: 9618, signal 267199/348420 (executing program) 2021/10/18 14:54:14 fetching corpus: 9668, signal 267681/348420 (executing program) 2021/10/18 14:54:15 fetching corpus: 9718, signal 268156/348420 (executing program) 2021/10/18 14:54:15 fetching corpus: 9768, signal 268529/348420 (executing program) 2021/10/18 14:54:15 fetching corpus: 9818, signal 268870/348420 (executing program) 2021/10/18 14:54:15 fetching corpus: 9868, signal 269200/348420 (executing program) 2021/10/18 14:54:15 fetching corpus: 9918, signal 269640/348434 (executing program) 2021/10/18 14:54:15 fetching corpus: 9968, signal 269891/348434 (executing program) 2021/10/18 14:54:15 fetching corpus: 10017, signal 270262/348453 (executing program) 2021/10/18 14:54:15 fetching corpus: 10067, signal 270622/348464 (executing program) 2021/10/18 14:54:16 fetching corpus: 10117, signal 270866/348464 (executing program) 2021/10/18 14:54:16 fetching corpus: 10167, signal 271352/348464 (executing program) 2021/10/18 14:54:16 fetching corpus: 10217, signal 271648/348464 (executing program) 2021/10/18 14:54:16 fetching corpus: 10266, signal 272004/348464 (executing program) 2021/10/18 14:54:16 fetching corpus: 10316, signal 272286/348464 (executing program) 2021/10/18 14:54:16 fetching corpus: 10366, signal 272813/348464 (executing program) 2021/10/18 14:54:16 fetching corpus: 10415, signal 273378/348472 (executing program) 2021/10/18 14:54:16 fetching corpus: 10465, signal 274047/348472 (executing program) 2021/10/18 14:54:17 fetching corpus: 10515, signal 274308/348472 (executing program) 2021/10/18 14:54:17 fetching corpus: 10565, signal 274661/348472 (executing program) 2021/10/18 14:54:17 fetching corpus: 10615, signal 274963/348472 (executing program) 2021/10/18 14:54:17 fetching corpus: 10665, signal 275546/348472 (executing program) 2021/10/18 14:54:17 fetching corpus: 10714, signal 275908/348472 (executing program) 2021/10/18 14:54:17 fetching corpus: 10764, signal 276438/348472 (executing program) 2021/10/18 14:54:17 fetching corpus: 10814, signal 276807/348472 (executing program) 2021/10/18 14:54:18 fetching corpus: 10864, signal 277189/348472 (executing program) 2021/10/18 14:54:18 fetching corpus: 10912, signal 277516/348472 (executing program) 2021/10/18 14:54:18 fetching corpus: 10962, signal 277937/348472 (executing program) 2021/10/18 14:54:18 fetching corpus: 11012, signal 278648/348472 (executing program) 2021/10/18 14:54:18 fetching corpus: 11062, signal 279052/348474 (executing program) 2021/10/18 14:54:18 fetching corpus: 11112, signal 279471/348474 (executing program) 2021/10/18 14:54:18 fetching corpus: 11162, signal 279772/348474 (executing program) 2021/10/18 14:54:18 fetching corpus: 11212, signal 280033/348474 (executing program) 2021/10/18 14:54:19 fetching corpus: 11261, signal 280303/348474 (executing program) 2021/10/18 14:54:19 fetching corpus: 11311, signal 280758/348474 (executing program) 2021/10/18 14:54:19 fetching corpus: 11360, signal 281001/348474 (executing program) 2021/10/18 14:54:19 fetching corpus: 11410, signal 281328/348474 (executing program) 2021/10/18 14:54:19 fetching corpus: 11457, signal 281677/348474 (executing program) 2021/10/18 14:54:19 fetching corpus: 11507, signal 282009/348474 (executing program) 2021/10/18 14:54:19 fetching corpus: 11557, signal 282460/348474 (executing program) 2021/10/18 14:54:20 fetching corpus: 11607, signal 282835/348474 (executing program) 2021/10/18 14:54:20 fetching corpus: 11657, signal 283416/348474 (executing program) 2021/10/18 14:54:20 fetching corpus: 11707, signal 283720/348474 (executing program) 2021/10/18 14:54:20 fetching corpus: 11757, signal 284165/348474 (executing program) 2021/10/18 14:54:20 fetching corpus: 11806, signal 284585/348474 (executing program) 2021/10/18 14:54:20 fetching corpus: 11856, signal 284891/348478 (executing program) 2021/10/18 14:54:20 fetching corpus: 11906, signal 285186/348479 (executing program) 2021/10/18 14:54:21 fetching corpus: 11954, signal 285489/348480 (executing program) 2021/10/18 14:54:21 fetching corpus: 12004, signal 285883/348480 (executing program) 2021/10/18 14:54:21 fetching corpus: 12054, signal 286176/348480 (executing program) 2021/10/18 14:54:21 fetching corpus: 12104, signal 286415/348480 (executing program) 2021/10/18 14:54:21 fetching corpus: 12154, signal 286773/348480 (executing program) 2021/10/18 14:54:21 fetching corpus: 12203, signal 287091/348494 (executing program) 2021/10/18 14:54:21 fetching corpus: 12253, signal 287335/348494 (executing program) 2021/10/18 14:54:21 fetching corpus: 12303, signal 287612/348494 (executing program) 2021/10/18 14:54:21 fetching corpus: 12353, signal 287947/348494 (executing program) 2021/10/18 14:54:22 fetching corpus: 12402, signal 288263/348494 (executing program) 2021/10/18 14:54:22 fetching corpus: 12452, signal 288510/348494 (executing program) 2021/10/18 14:54:22 fetching corpus: 12501, signal 288856/348494 (executing program) 2021/10/18 14:54:22 fetching corpus: 12551, signal 289139/348495 (executing program) 2021/10/18 14:54:22 fetching corpus: 12600, signal 289465/348495 (executing program) 2021/10/18 14:54:22 fetching corpus: 12650, signal 289860/348495 (executing program) 2021/10/18 14:54:23 fetching corpus: 12700, signal 290178/348495 (executing program) 2021/10/18 14:54:23 fetching corpus: 12750, signal 290453/348495 (executing program) 2021/10/18 14:54:23 fetching corpus: 12800, signal 290731/348495 (executing program) 2021/10/18 14:54:23 fetching corpus: 12849, signal 291107/348495 (executing program) 2021/10/18 14:54:23 fetching corpus: 12899, signal 291425/348495 (executing program) 2021/10/18 14:54:23 fetching corpus: 12948, signal 291688/348495 (executing program) 2021/10/18 14:54:23 fetching corpus: 12998, signal 291954/348495 (executing program) 2021/10/18 14:54:23 fetching corpus: 13048, signal 292289/348495 (executing program) 2021/10/18 14:54:23 fetching corpus: 13098, signal 292618/348495 (executing program) 2021/10/18 14:54:24 fetching corpus: 13148, signal 292823/348495 (executing program) 2021/10/18 14:54:24 fetching corpus: 13197, signal 293035/348495 (executing program) 2021/10/18 14:54:24 fetching corpus: 13247, signal 293255/348495 (executing program) 2021/10/18 14:54:24 fetching corpus: 13297, signal 293576/348495 (executing program) 2021/10/18 14:54:24 fetching corpus: 13347, signal 293913/348495 (executing program) 2021/10/18 14:54:24 fetching corpus: 13395, signal 294211/348508 (executing program) 2021/10/18 14:54:24 fetching corpus: 13445, signal 294572/348508 (executing program) 2021/10/18 14:54:24 fetching corpus: 13492, signal 295014/348518 (executing program) 2021/10/18 14:54:24 fetching corpus: 13542, signal 295196/348518 (executing program) 2021/10/18 14:54:25 fetching corpus: 13591, signal 295530/348518 (executing program) 2021/10/18 14:54:25 fetching corpus: 13641, signal 295850/348518 (executing program) 2021/10/18 14:54:25 fetching corpus: 13691, signal 296099/348518 (executing program) 2021/10/18 14:54:25 fetching corpus: 13741, signal 296731/348518 (executing program) 2021/10/18 14:54:25 fetching corpus: 13790, signal 297009/348518 (executing program) 2021/10/18 14:54:25 fetching corpus: 13840, signal 297266/348518 (executing program) 2021/10/18 14:54:25 fetching corpus: 13890, signal 297486/348518 (executing program) 2021/10/18 14:54:25 fetching corpus: 13940, signal 297720/348518 (executing program) 2021/10/18 14:54:25 fetching corpus: 13990, signal 297983/348518 (executing program) 2021/10/18 14:54:26 fetching corpus: 14040, signal 298225/348518 (executing program) 2021/10/18 14:54:26 fetching corpus: 14090, signal 298537/348518 (executing program) 2021/10/18 14:54:26 fetching corpus: 14140, signal 298896/348518 (executing program) 2021/10/18 14:54:26 fetching corpus: 14190, signal 299267/348523 (executing program) 2021/10/18 14:54:26 fetching corpus: 14240, signal 299612/348523 (executing program) 2021/10/18 14:54:26 fetching corpus: 14289, signal 299922/348523 (executing program) 2021/10/18 14:54:26 fetching corpus: 14339, signal 300213/348523 (executing program) 2021/10/18 14:54:27 fetching corpus: 14389, signal 300611/348523 (executing program) 2021/10/18 14:54:27 fetching corpus: 14439, signal 300832/348523 (executing program) 2021/10/18 14:54:27 fetching corpus: 14488, signal 301069/348523 (executing program) 2021/10/18 14:54:27 fetching corpus: 14538, signal 301421/348523 (executing program) 2021/10/18 14:54:27 fetching corpus: 14588, signal 301734/348523 (executing program) 2021/10/18 14:54:27 fetching corpus: 14638, signal 301933/348560 (executing program) 2021/10/18 14:54:27 fetching corpus: 14688, signal 302179/348560 (executing program) 2021/10/18 14:54:27 fetching corpus: 14738, signal 302384/348560 (executing program) 2021/10/18 14:54:27 fetching corpus: 14788, signal 302617/348560 (executing program) 2021/10/18 14:54:27 fetching corpus: 14838, signal 302844/348560 (executing program) 2021/10/18 14:54:28 fetching corpus: 14888, signal 303070/348560 (executing program) 2021/10/18 14:54:28 fetching corpus: 14938, signal 303359/348560 (executing program) 2021/10/18 14:54:28 fetching corpus: 14988, signal 303651/348560 (executing program) 2021/10/18 14:54:28 fetching corpus: 15038, signal 303900/348572 (executing program) 2021/10/18 14:54:28 fetching corpus: 15088, signal 304133/348572 (executing program) 2021/10/18 14:54:28 fetching corpus: 15138, signal 304474/348572 (executing program) 2021/10/18 14:54:28 fetching corpus: 15188, signal 304835/348572 (executing program) 2021/10/18 14:54:29 fetching corpus: 15238, signal 305082/348572 (executing program) 2021/10/18 14:54:29 fetching corpus: 15288, signal 305342/348572 (executing program) 2021/10/18 14:54:29 fetching corpus: 15337, signal 305572/348572 (executing program) 2021/10/18 14:54:29 fetching corpus: 15387, signal 305768/348572 (executing program) 2021/10/18 14:54:29 fetching corpus: 15437, signal 306005/348572 (executing program) 2021/10/18 14:54:29 fetching corpus: 15487, signal 306347/348572 (executing program) 2021/10/18 14:54:29 fetching corpus: 15537, signal 306575/348572 (executing program) 2021/10/18 14:54:29 fetching corpus: 15586, signal 306792/348572 (executing program) 2021/10/18 14:54:30 fetching corpus: 15635, signal 307047/348572 (executing program) 2021/10/18 14:54:30 fetching corpus: 15684, signal 307215/348572 (executing program) 2021/10/18 14:54:30 fetching corpus: 15734, signal 307457/348572 (executing program) 2021/10/18 14:54:30 fetching corpus: 15783, signal 307697/348572 (executing program) 2021/10/18 14:54:30 fetching corpus: 15833, signal 307915/348573 (executing program) 2021/10/18 14:54:30 fetching corpus: 15882, signal 308106/348573 (executing program) 2021/10/18 14:54:30 fetching corpus: 15931, signal 308364/348573 (executing program) 2021/10/18 14:54:30 fetching corpus: 15981, signal 308704/348573 (executing program) 2021/10/18 14:54:30 fetching corpus: 16031, signal 308910/348573 (executing program) 2021/10/18 14:54:30 fetching corpus: 16080, signal 309174/348573 (executing program) 2021/10/18 14:54:31 fetching corpus: 16130, signal 309928/348573 (executing program) 2021/10/18 14:54:31 fetching corpus: 16180, signal 310146/348573 (executing program) 2021/10/18 14:54:31 fetching corpus: 16230, signal 310392/348573 (executing program) 2021/10/18 14:54:31 fetching corpus: 16280, signal 310666/348573 (executing program) 2021/10/18 14:54:31 fetching corpus: 16330, signal 310918/348573 (executing program) 2021/10/18 14:54:31 fetching corpus: 16379, signal 311071/348573 (executing program) 2021/10/18 14:54:32 fetching corpus: 16429, signal 311406/348573 (executing program) 2021/10/18 14:54:32 fetching corpus: 16478, signal 311725/348574 (executing program) 2021/10/18 14:54:32 fetching corpus: 16528, signal 311999/348574 (executing program) 2021/10/18 14:54:32 fetching corpus: 16577, signal 312223/348574 (executing program) 2021/10/18 14:54:32 fetching corpus: 16627, signal 312502/348576 (executing program) 2021/10/18 14:54:32 fetching corpus: 16676, signal 312658/348576 (executing program) 2021/10/18 14:54:32 fetching corpus: 16726, signal 312852/348576 (executing program) 2021/10/18 14:54:32 fetching corpus: 16776, signal 313072/348576 (executing program) 2021/10/18 14:54:32 fetching corpus: 16826, signal 313304/348576 (executing program) 2021/10/18 14:54:33 fetching corpus: 16875, signal 313533/348576 (executing program) 2021/10/18 14:54:33 fetching corpus: 16924, signal 313838/348576 (executing program) 2021/10/18 14:54:33 fetching corpus: 16974, signal 314097/348576 (executing program) 2021/10/18 14:54:33 fetching corpus: 17024, signal 314355/348576 (executing program) 2021/10/18 14:54:33 fetching corpus: 17074, signal 314590/348578 (executing program) 2021/10/18 14:54:33 fetching corpus: 17124, signal 314821/348578 (executing program) 2021/10/18 14:54:33 fetching corpus: 17174, signal 315067/348578 (executing program) 2021/10/18 14:54:34 fetching corpus: 17224, signal 315327/348578 (executing program) 2021/10/18 14:54:34 fetching corpus: 17274, signal 315502/348578 (executing program) 2021/10/18 14:54:34 fetching corpus: 17324, signal 315734/348578 (executing program) 2021/10/18 14:54:34 fetching corpus: 17374, signal 315959/348578 (executing program) 2021/10/18 14:54:34 fetching corpus: 17424, signal 316215/348578 (executing program) 2021/10/18 14:54:34 fetching corpus: 17474, signal 316476/348591 (executing program) 2021/10/18 14:54:34 fetching corpus: 17524, signal 316668/348591 (executing program) 2021/10/18 14:54:34 fetching corpus: 17574, signal 317049/348591 (executing program) 2021/10/18 14:54:34 fetching corpus: 17624, signal 317258/348591 (executing program) 2021/10/18 14:54:35 fetching corpus: 17674, signal 317457/348591 (executing program) 2021/10/18 14:54:35 fetching corpus: 17723, signal 317730/348591 (executing program) 2021/10/18 14:54:35 fetching corpus: 17773, signal 318039/348591 (executing program) 2021/10/18 14:54:35 fetching corpus: 17821, signal 318379/348591 (executing program) 2021/10/18 14:54:35 fetching corpus: 17869, signal 318582/348591 (executing program) 2021/10/18 14:54:35 fetching corpus: 17919, signal 318775/348591 (executing program) 2021/10/18 14:54:35 fetching corpus: 17968, signal 319022/348591 (executing program) 2021/10/18 14:54:36 fetching corpus: 18017, signal 319263/348591 (executing program) 2021/10/18 14:54:36 fetching corpus: 18066, signal 319457/348591 (executing program) 2021/10/18 14:54:36 fetching corpus: 18116, signal 319660/348591 (executing program) 2021/10/18 14:54:36 fetching corpus: 18166, signal 319858/348591 (executing program) 2021/10/18 14:54:36 fetching corpus: 18216, signal 320126/348591 (executing program) 2021/10/18 14:54:36 fetching corpus: 18266, signal 320329/348598 (executing program) 2021/10/18 14:54:36 fetching corpus: 18316, signal 320606/348598 (executing program) 2021/10/18 14:54:36 fetching corpus: 18366, signal 321004/348598 (executing program) 2021/10/18 14:54:36 fetching corpus: 18416, signal 321181/348598 (executing program) 2021/10/18 14:54:37 fetching corpus: 18466, signal 321461/348598 (executing program) 2021/10/18 14:54:37 fetching corpus: 18516, signal 321661/348598 (executing program) 2021/10/18 14:54:37 fetching corpus: 18566, signal 321854/348598 (executing program) 2021/10/18 14:54:37 fetching corpus: 18616, signal 322013/348602 (executing program) 2021/10/18 14:54:37 fetching corpus: 18666, signal 322205/348602 (executing program) 2021/10/18 14:54:37 fetching corpus: 18715, signal 322427/348602 (executing program) 2021/10/18 14:54:37 fetching corpus: 18764, signal 322635/348602 (executing program) 2021/10/18 14:54:38 fetching corpus: 18813, signal 322891/348602 (executing program) 2021/10/18 14:54:38 fetching corpus: 18863, signal 323101/348602 (executing program) 2021/10/18 14:54:38 fetching corpus: 18913, signal 323291/348602 (executing program) 2021/10/18 14:54:38 fetching corpus: 18962, signal 323539/348602 (executing program) 2021/10/18 14:54:38 fetching corpus: 19012, signal 323791/348602 (executing program) 2021/10/18 14:54:38 fetching corpus: 19062, signal 324008/348602 (executing program) 2021/10/18 14:54:38 fetching corpus: 19111, signal 324348/348602 (executing program) 2021/10/18 14:54:39 fetching corpus: 19161, signal 324555/348608 (executing program) 2021/10/18 14:54:39 fetching corpus: 19211, signal 324782/348608 (executing program) 2021/10/18 14:54:39 fetching corpus: 19260, signal 324995/348608 (executing program) 2021/10/18 14:54:39 fetching corpus: 19309, signal 325243/348608 (executing program) 2021/10/18 14:54:39 fetching corpus: 19359, signal 325543/348608 (executing program) 2021/10/18 14:54:39 fetching corpus: 19409, signal 325712/348608 (executing program) 2021/10/18 14:54:39 fetching corpus: 19458, signal 325884/348608 (executing program) 2021/10/18 14:54:39 fetching corpus: 19508, signal 326098/348608 (executing program) 2021/10/18 14:54:40 fetching corpus: 19558, signal 326287/348608 (executing program) 2021/10/18 14:54:40 fetching corpus: 19608, signal 326491/348608 (executing program) 2021/10/18 14:54:40 fetching corpus: 19658, signal 326774/348608 (executing program) 2021/10/18 14:54:40 fetching corpus: 19707, signal 327103/348608 (executing program) 2021/10/18 14:54:40 fetching corpus: 19757, signal 327302/348608 (executing program) 2021/10/18 14:54:40 fetching corpus: 19806, signal 327486/348612 (executing program) 2021/10/18 14:54:40 fetching corpus: 19855, signal 327664/348612 (executing program) 2021/10/18 14:54:41 fetching corpus: 19904, signal 327910/348612 (executing program) 2021/10/18 14:54:41 fetching corpus: 19954, signal 328074/348612 (executing program) 2021/10/18 14:54:41 fetching corpus: 20004, signal 328340/348612 (executing program) 2021/10/18 14:54:41 fetching corpus: 20053, signal 328516/348612 (executing program) 2021/10/18 14:54:41 fetching corpus: 20101, signal 328658/348612 (executing program) 2021/10/18 14:54:41 fetching corpus: 20151, signal 328865/348612 (executing program) 2021/10/18 14:54:41 fetching corpus: 20200, signal 329085/348612 (executing program) 2021/10/18 14:54:42 fetching corpus: 20250, signal 329291/348612 (executing program) 2021/10/18 14:54:42 fetching corpus: 20300, signal 329469/348612 (executing program) 2021/10/18 14:54:42 fetching corpus: 20350, signal 329739/348612 (executing program) 2021/10/18 14:54:42 fetching corpus: 20400, signal 329956/348612 (executing program) 2021/10/18 14:54:42 fetching corpus: 20450, signal 330135/348612 (executing program) 2021/10/18 14:54:42 fetching corpus: 20500, signal 330375/348614 (executing program) 2021/10/18 14:54:42 fetching corpus: 20550, signal 330601/348614 (executing program) 2021/10/18 14:54:42 fetching corpus: 20600, signal 330852/348614 (executing program) 2021/10/18 14:54:43 fetching corpus: 20650, signal 331020/348614 (executing program) 2021/10/18 14:54:43 fetching corpus: 20700, signal 331271/348614 (executing program) 2021/10/18 14:54:43 fetching corpus: 20750, signal 331473/348616 (executing program) 2021/10/18 14:54:43 fetching corpus: 20799, signal 331703/348616 (executing program) 2021/10/18 14:54:43 fetching corpus: 20849, signal 331917/348616 (executing program) 2021/10/18 14:54:43 fetching corpus: 20898, signal 332167/348618 (executing program) 2021/10/18 14:54:44 fetching corpus: 20947, signal 332364/348628 (executing program) 2021/10/18 14:54:44 fetching corpus: 20996, signal 332590/348628 (executing program) 2021/10/18 14:54:44 fetching corpus: 21046, signal 332860/348628 (executing program) 2021/10/18 14:54:44 fetching corpus: 21096, signal 333158/348628 (executing program) 2021/10/18 14:54:44 fetching corpus: 21145, signal 333309/348628 (executing program) 2021/10/18 14:54:44 fetching corpus: 21195, signal 333457/348628 (executing program) 2021/10/18 14:54:44 fetching corpus: 21245, signal 333742/348628 (executing program) 2021/10/18 14:54:44 fetching corpus: 21295, signal 333950/348628 (executing program) 2021/10/18 14:54:44 fetching corpus: 21345, signal 334228/348631 (executing program) 2021/10/18 14:54:45 fetching corpus: 21395, signal 334404/348631 (executing program) 2021/10/18 14:54:45 fetching corpus: 21445, signal 334591/348631 (executing program) 2021/10/18 14:54:45 fetching corpus: 21493, signal 334810/348631 (executing program) 2021/10/18 14:54:45 fetching corpus: 21542, signal 334971/348631 (executing program) 2021/10/18 14:54:45 fetching corpus: 21591, signal 335389/348631 (executing program) 2021/10/18 14:54:45 fetching corpus: 21641, signal 335587/348631 (executing program) 2021/10/18 14:54:45 fetching corpus: 21691, signal 335793/348631 (executing program) 2021/10/18 14:54:46 fetching corpus: 21741, signal 335983/348631 (executing program) 2021/10/18 14:54:46 fetching corpus: 21791, signal 336149/348632 (executing program) 2021/10/18 14:54:46 fetching corpus: 21841, signal 336339/348632 (executing program) 2021/10/18 14:54:46 fetching corpus: 21890, signal 336515/348632 (executing program) 2021/10/18 14:54:46 fetching corpus: 21938, signal 336698/348632 (executing program) 2021/10/18 14:54:46 fetching corpus: 21988, signal 336880/348632 (executing program) 2021/10/18 14:54:46 fetching corpus: 22038, signal 337102/348632 (executing program) 2021/10/18 14:54:46 fetching corpus: 22088, signal 337313/348632 (executing program) 2021/10/18 14:54:46 fetching corpus: 22137, signal 337520/348632 (executing program) 2021/10/18 14:54:47 fetching corpus: 22187, signal 337690/348632 (executing program) 2021/10/18 14:54:47 fetching corpus: 22237, signal 337913/348632 (executing program) 2021/10/18 14:54:47 fetching corpus: 22287, signal 338105/348632 (executing program) 2021/10/18 14:54:47 fetching corpus: 22335, signal 338305/348640 (executing program) 2021/10/18 14:54:47 fetching corpus: 22385, signal 338531/348640 (executing program) 2021/10/18 14:54:47 fetching corpus: 22435, signal 338740/348640 (executing program) 2021/10/18 14:54:47 fetching corpus: 22485, signal 338981/348640 (executing program) 2021/10/18 14:54:47 fetching corpus: 22535, signal 339247/348640 (executing program) 2021/10/18 14:54:48 fetching corpus: 22584, signal 339465/348640 (executing program) 2021/10/18 14:54:48 fetching corpus: 22633, signal 339628/348640 (executing program) 2021/10/18 14:54:48 fetching corpus: 22681, signal 339880/348640 (executing program) 2021/10/18 14:54:48 fetching corpus: 22731, signal 340063/348640 (executing program) 2021/10/18 14:54:48 fetching corpus: 22781, signal 340225/348640 (executing program) 2021/10/18 14:54:48 fetching corpus: 22831, signal 340376/348640 (executing program) 2021/10/18 14:54:48 fetching corpus: 22880, signal 340584/348640 (executing program) 2021/10/18 14:54:48 fetching corpus: 22930, signal 340720/348640 (executing program) 2021/10/18 14:54:49 fetching corpus: 22979, signal 340939/348640 (executing program) 2021/10/18 14:54:49 fetching corpus: 23029, signal 341134/348640 (executing program) 2021/10/18 14:54:49 fetching corpus: 23079, signal 341329/348640 (executing program) 2021/10/18 14:54:49 fetching corpus: 23129, signal 341513/348640 (executing program) 2021/10/18 14:54:49 fetching corpus: 23179, signal 341693/348640 (executing program) 2021/10/18 14:54:49 fetching corpus: 23229, signal 341867/348640 (executing program) 2021/10/18 14:54:49 fetching corpus: 23279, signal 342031/348640 (executing program) 2021/10/18 14:54:49 fetching corpus: 23329, signal 342198/348640 (executing program) 2021/10/18 14:54:49 fetching corpus: 23379, signal 342350/348640 (executing program) 2021/10/18 14:54:50 fetching corpus: 23429, signal 342598/348640 (executing program) 2021/10/18 14:54:50 fetching corpus: 23477, signal 342823/348641 (executing program) 2021/10/18 14:54:50 fetching corpus: 23526, signal 343014/348641 (executing program) 2021/10/18 14:54:50 fetching corpus: 23575, signal 343178/348641 (executing program) 2021/10/18 14:54:50 fetching corpus: 23625, signal 343362/348641 (executing program) 2021/10/18 14:54:50 fetching corpus: 23675, signal 343545/348641 (executing program) 2021/10/18 14:54:51 fetching corpus: 23724, signal 343689/348641 (executing program) 2021/10/18 14:54:51 fetching corpus: 23774, signal 343948/348641 (executing program) 2021/10/18 14:54:51 fetching corpus: 23824, signal 344162/348652 (executing program) 2021/10/18 14:54:51 fetching corpus: 23874, signal 344338/348652 (executing program) 2021/10/18 14:54:51 fetching corpus: 23923, signal 344487/348652 (executing program) 2021/10/18 14:54:51 fetching corpus: 23973, signal 344663/348652 (executing program) 2021/10/18 14:54:51 fetching corpus: 24023, signal 344829/348652 (executing program) 2021/10/18 14:54:51 fetching corpus: 24070, signal 345132/348652 (executing program) 2021/10/18 14:54:51 fetching corpus: 24070, signal 345132/348652 (executing program) [ 132.626455][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.632820][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 2021/10/18 14:54:53 starting 6 fuzzer processes 14:54:53 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x0) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 14:54:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'geneve1\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "5b82b2bd98a034ac26a3f03a8490b1eb899c6cf83f253314c73015aec3a209ff", "cfce4b6146affc4406e3ca24210b33f1c968c17407b30480021bb428f600cc7f", "97b30c5e986007538d55b027f39c78b866e73fae18351c1129a97363a3f08509", "31b99e4dc3069613029b4951f75a2b1fa73b820827caf982f60097f57829bb54", "21d571674b96115a29c536428040dd4cb9d79aa172abbb66adc8c2fb1e231cd7", "ea7247d5eacd4b09ee9718a9"}}) 14:54:54 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x6}, 0x0) 14:54:54 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 14:54:54 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x1b, 0x0, 0x700) [ 135.222657][ T6578] chnl_net:caif_netlink_parms(): no params data found 14:54:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000000000000000026bd7000ffdbdf25000001006a13ed7ebb430a9d000000000000000000000001"], 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x2404008d) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)={0x18, r2, 0x1, 0x70bd2d, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}}, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c40)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2, @ANYBLOB="080027bd7000ffdbdf25100000000c000280080006000700000044000380050008003f00000008000100000000000800030004000000060004009d0300000800010000000000060007004e210000050008008100000006000400070000000800060000000000680003801400020076657468315f766c616e00000000000008000100000000000600040064040000060007004e200000060007004e210000060007004e21000014000200766c616e30000000000000000000000014000600ff0200000000000000000000000000010800040001000000080005000700000008000500080000000800040000010000"], 0xf4}}, 0x4000000) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r3, @ANYBLOB="660733e08d541b06b6acd4cb952da9f3983a890a268cbaba24b3bac9ec569861a0118022baf2ac49f42ca822afe52afe8542"], 0x28}, 0x1, 0x0, 0x0, 0x24008089}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="07020000000b00000000000000000000fffffffe00000000000000000000090000000000"]}) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRESOCT=r4], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000001) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000240), &(0x7f0000000340)=0x44) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="01b8", @ANYBLOB="1ccbba61d715393a5c310c66db2aaa3a5cb1e2ad418e0a7c7180ca01eb87769ee411d4409c390027e2294ac1e83cb213abbcdc74", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x20004084) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9f0}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x3f}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_OFFSET={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000000) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000552da", @ANYRES16=0x0, @ANYBLOB="330a2dbd7000040004000000000000003c00038008000100ffffffff08000200070000000800010000040000080003003d00000008000200e50000000800020029040000080002000002000004000380240005800c000280080003000314000280080002009d01000008000200060000000000000000000000000000000000e41334976853e32c6accff7c373624582ff13e623e9f4b91e90e6fb157943e515d07af5254370e9241557453000000"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x20000040) getsockname$packet(r3, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x40000, {0x0, 0x0, 0x0, r6, 0x41100, 0x7001d}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8004}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x74}}, 0x40880) [ 135.440178][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.449816][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.460982][ T6578] device bridge_slave_0 entered promiscuous mode [ 135.474288][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.484754][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.492946][ T6578] device bridge_slave_1 entered promiscuous mode [ 135.578699][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.630547][ T6578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.661875][ T6580] chnl_net:caif_netlink_parms(): no params data found [ 135.809372][ T6578] team0: Port device team_slave_0 added [ 135.864919][ T6578] team0: Port device team_slave_1 added [ 135.910276][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.918159][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.929600][ T6580] device bridge_slave_0 entered promiscuous mode [ 135.956799][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.963900][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.991115][ T6578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.016885][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.024002][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.048130][ T6580] device bridge_slave_1 entered promiscuous mode [ 136.080946][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.104744][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.132183][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.182345][ T6580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.221405][ T6580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.236109][ T6578] device hsr_slave_0 entered promiscuous mode [ 136.243513][ T6578] device hsr_slave_1 entered promiscuous mode [ 136.322698][ T6580] team0: Port device team_slave_0 added [ 136.353268][ T6580] team0: Port device team_slave_1 added [ 136.483189][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.493154][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.522119][ T6580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.549975][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.565053][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.592140][ T6580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.691041][ T6584] chnl_net:caif_netlink_parms(): no params data found [ 136.749274][ T6602] chnl_net:caif_netlink_parms(): no params data found [ 136.784060][ T6580] device hsr_slave_0 entered promiscuous mode [ 136.800842][ T6580] device hsr_slave_1 entered promiscuous mode [ 136.814152][ T6580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.822334][ T6580] Cannot create hsr debugfs directory [ 136.855884][ T1264] Bluetooth: hci0: command 0x0409 tx timeout [ 137.022064][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.030529][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.039370][ T6584] device bridge_slave_0 entered promiscuous mode [ 137.061704][ T6578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.079813][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.087493][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.096228][ T6584] device bridge_slave_1 entered promiscuous mode [ 137.116930][ T6602] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.124031][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.133356][ T6602] device bridge_slave_0 entered promiscuous mode [ 137.144467][ T6578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.168501][ T6602] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.174656][ T1264] Bluetooth: hci1: command 0x0409 tx timeout [ 137.179651][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.192160][ T6602] device bridge_slave_1 entered promiscuous mode [ 137.209984][ T6578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.269781][ T6578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.284241][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.299007][ T6602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.314252][ T6602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.330978][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.417094][ T6602] team0: Port device team_slave_0 added [ 137.441933][ T6602] team0: Port device team_slave_1 added [ 137.450350][ T6584] team0: Port device team_slave_0 added [ 137.483186][ T6584] team0: Port device team_slave_1 added [ 137.553681][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.562208][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.589916][ T6602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.605279][ T6602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.612697][ T6602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.639475][ T6602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.655674][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.662676][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.689274][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.702674][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.710352][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.738647][ T5] Bluetooth: hci3: command 0x0409 tx timeout [ 137.740436][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.775728][ T6580] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.821072][ T6580] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.841817][ T6602] device hsr_slave_0 entered promiscuous mode [ 137.851388][ T6602] device hsr_slave_1 entered promiscuous mode [ 137.859023][ T6602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.870666][ T6602] Cannot create hsr debugfs directory [ 137.893374][ T6584] device hsr_slave_0 entered promiscuous mode [ 137.901444][ T6584] device hsr_slave_1 entered promiscuous mode [ 137.908825][ T6584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.917287][ T6584] Cannot create hsr debugfs directory [ 137.926221][ T6580] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.968746][ T6580] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 138.060645][ T7526] Bluetooth: hci4: command 0x0409 tx timeout [ 138.106043][ T6578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.194269][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.208390][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.220695][ T6578] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.254813][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.264024][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.274712][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.281999][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.291225][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.300787][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.310027][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.317249][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.325711][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.375919][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.391927][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.403739][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.415001][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.443374][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.451732][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.465614][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.474240][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.484055][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.499809][ T6584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 138.517213][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.526613][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.539775][ T6584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 138.553082][ T6584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 138.562351][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.587560][ T6580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.594409][ T6584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 138.620573][ T6602] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 138.644844][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.652580][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.666054][ T6602] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 138.681688][ T6602] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 138.702776][ T6580] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.715234][ T6602] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.723663][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.733507][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.749972][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.770689][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.781787][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.793588][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.800754][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.814051][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.837866][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.849905][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.859627][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.866791][ T7890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.877263][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.895519][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 138.904099][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.944504][ T1264] Bluetooth: hci0: command 0x041b tx timeout [ 138.948977][ T6578] device veth0_vlan entered promiscuous mode [ 138.970015][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 138.978911][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.989447][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.998444][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.009222][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.018121][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.026981][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.035875][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.043543][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.051943][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.073392][ T6578] device veth1_vlan entered promiscuous mode [ 139.104384][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.112643][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.121613][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.130901][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.150006][ T6580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.162866][ T6580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.179259][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.188014][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.207686][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.234136][ T6578] device veth0_macvtap entered promiscuous mode [ 139.249431][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.259022][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 139.269058][ T2956] Bluetooth: hci1: command 0x041b tx timeout [ 139.276271][ T6578] device veth1_macvtap entered promiscuous mode [ 139.291410][ T6580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.307710][ T6584] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.321083][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 139.330161][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.341129][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.349896][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.360223][ T2956] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.382898][ T6602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.392770][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.401617][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.410769][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.417920][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.432842][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.441231][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.450107][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.464898][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.486306][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 139.496056][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 139.509100][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.517711][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.530255][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.537383][ T7890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.548902][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.578123][ T6602] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.591241][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 139.601178][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.611024][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.621292][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.630431][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.639800][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.649120][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.658430][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.667336][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.676140][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.684883][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.692610][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.700827][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.709617][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.722172][ T6578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.738943][ T6578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.748199][ T6578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.757177][ T6578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.770844][ T6580] device veth0_vlan entered promiscuous mode [ 139.792229][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.801155][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.809712][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.814743][ T1264] Bluetooth: hci3: command 0x041b tx timeout [ 139.818193][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.832142][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.842380][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.851458][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.860389][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.867535][ T7890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.878345][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.907950][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.916409][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.925703][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.934069][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.941182][ T7890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.949863][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.961326][ T6580] device veth1_vlan entered promiscuous mode [ 140.009016][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.017851][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.026869][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 140.036473][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.046400][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 140.079471][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.090743][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 140.099694][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 140.110525][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 140.119591][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 140.128809][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 140.138306][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 140.147606][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 140.157011][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.165664][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.174023][ T7911] Bluetooth: hci4: command 0x041b tx timeout [ 140.179280][ T6602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 140.251254][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.275024][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.282545][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.297557][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.317802][ T6580] device veth0_macvtap entered promiscuous mode [ 140.359138][ T6580] device veth1_macvtap entered promiscuous mode [ 140.367678][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.376671][ T6602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.385271][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.400813][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.412418][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.421209][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.431007][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.457504][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.483023][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.496458][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 140.505686][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 140.532457][ T6584] device veth0_vlan entered promiscuous mode [ 140.551768][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 140.564740][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.579103][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.597348][ T6584] device veth1_vlan entered promiscuous mode [ 140.604055][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.612279][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.625266][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.639208][ T6580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 140.650730][ T6580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.666864][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.678410][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.679301][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.688153][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.706183][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.737408][ T6580] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.750424][ T6580] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.759671][ T6580] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.770887][ T6580] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.787651][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.795716][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 140.803511][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.812967][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 140.876239][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.888356][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.902800][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 140.912085][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 140.926203][ T6584] device veth0_macvtap entered promiscuous mode 14:55:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) [ 140.984760][ T6602] device veth0_vlan entered promiscuous mode [ 140.993280][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.013378][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.014908][ T1264] Bluetooth: hci0: command 0x040f tx timeout [ 141.028474][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.046557][ T6584] device veth1_macvtap entered promiscuous mode [ 141.090937][ T6602] device veth1_vlan entered promiscuous mode 14:55:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x10000}}, 0x20}}, 0x0) [ 141.176840][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.209503][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.226518][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.238723][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.253082][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.270680][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 141.281780][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.294379][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 141.306618][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.320438][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.332758][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 141.334869][ T7913] Bluetooth: hci1: command 0x040f tx timeout [ 141.366526][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 14:55:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 141.380735][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.404677][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 141.413471][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 141.439341][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 141.455458][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 141.476511][ T1073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 14:55:01 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a0, &(0x7f0000000080)={'vcan0\x00'}) [ 141.503858][ T1073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.573602][ T6602] device veth0_macvtap entered promiscuous mode [ 141.594192][ T6584] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.624320][ T6584] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.633096][ T6584] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.664395][ T6584] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.702127][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.727346][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 141.738563][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 141.762916][ T6602] device veth1_macvtap entered promiscuous mode [ 141.779078][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 141.795510][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 14:55:02 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x101, 0xe, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc}]}]}, 0x58}}, 0x0) [ 141.814435][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.823329][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.823950][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.843904][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.865820][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.894742][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 141.905638][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:55:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) [ 141.924318][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 141.939635][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.951264][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_0 14:55:02 executing program 0: connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) [ 141.981668][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.999903][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 142.031338][ T7911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 142.062908][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.087690][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.117784][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.137776][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.157607][ T6602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 142.198933][ T6602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.212177][ T6602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.214705][ T7911] Bluetooth: hci4: command 0x040f tx timeout [ 142.248769][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 142.265467][ T7912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 142.287975][ T6602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 14:55:02 executing program 1: r0 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x1c) [ 142.302545][ T6602] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.319164][ T6602] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.337978][ T6602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.432658][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.460430][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.492656][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.580533][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.603236][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.621559][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.658751][ T8005] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 142.670914][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.718261][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 142.754098][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.769925][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.801853][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 143.095219][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 143.415626][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 143.975831][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 144.294608][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 148.546608][ T8048] chnl_net:caif_netlink_parms(): no params data found [ 148.613756][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.622831][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.631296][ T8048] device bridge_slave_0 entered promiscuous mode [ 148.642860][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.651276][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.661583][ T8048] device bridge_slave_1 entered promiscuous mode [ 148.692829][ T8048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.714297][ T8048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.785725][ T8048] team0: Port device team_slave_0 added [ 148.794949][ T8048] team0: Port device team_slave_1 added [ 148.839504][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.849988][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.878346][ T8048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.893839][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.901863][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.930146][ T8048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.984597][ T8048] device hsr_slave_0 entered promiscuous mode [ 148.993645][ T8048] device hsr_slave_1 entered promiscuous mode [ 149.002900][ T8048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.012291][ T8048] Cannot create hsr debugfs directory [ 149.149098][ T8048] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.163133][ T8048] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.172901][ T8048] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.189172][ T8048] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.213473][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.220718][ T8048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.228729][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.235883][ T8048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.295188][ T8048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.310641][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.319588][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.331106][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.341044][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 149.355344][ T8048] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.368823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.378501][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.385794][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.404535][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 149.412939][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.420153][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.435024][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 149.449829][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 149.458147][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 149.473698][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 149.488874][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 149.500080][ T8048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.521462][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.530353][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.543640][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.565134][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 149.573731][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 149.599695][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.609038][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.620456][ T8048] device veth0_vlan entered promiscuous mode [ 149.629565][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.638152][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.657797][ T8048] device veth1_vlan entered promiscuous mode [ 149.684410][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.692494][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.704861][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.713425][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.728570][ T8048] device veth0_macvtap entered promiscuous mode [ 149.739589][ T8048] device veth1_macvtap entered promiscuous mode [ 149.758198][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.771034][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.782459][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.793289][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.803482][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.814275][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.824412][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.835672][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.847571][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.857188][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 149.866016][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.874262][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.883323][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.895399][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.915566][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.925502][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.936160][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.946341][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.957444][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.967696][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.978636][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.991990][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.002678][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.014020][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.027181][ T8048] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.036052][ T8048] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.045598][ T8048] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.055065][ T8048] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.269773][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.317031][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.333255][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.395151][ T7553] Bluetooth: hci2: command 0x0409 tx timeout [ 150.415561][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.432672][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.462024][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.519469][ T8311] chnl_net:caif_netlink_parms(): no params data found 14:55:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={0x0}}, 0x40000) unshare(0x40000000) unshare(0x0) r1 = socket(0x11, 0x800000003, 0x0) unshare(0x48020000) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000024000b0f000000004000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000007000100667100000c00020008000700ffff0000280008801c000100ff8000000000eeff0000000000000000000000000100000006000200080000007ebeee72a024a5abc7aca59f8809f0ca9e35355c6f3e23405f2541f6ef"], 0x60}}, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r4, &(0x7f0000000d00), 0x1bdd307, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="69705f76746930000000000000cf0000", @ANYRES32=r2, @ANYBLOB="7800008000000401800000014fcf00fc006800003f29907800000000000000009404000086550000000338113e3d4d2219a1121a99b718b712192d0011b1f938ca0e1e7e260d56addea788b20711eee71ac7946c749d04b1be5ecfb231001099ef633a42733f108590a5eeceb302036c0503ce070608699b4d8317fae0000002e0000001ffffffffe000000200000000891bf07f000001ac1414bbac1e0001ac141429ac1414bb64010101890fe2e000000100000000e0000001441c8861ffffffff00010001e000000100000004ac1414bb000d0001441c7dd10000000000000000e00000010000da0aac1e00010000b219830b12ffffffffe0000002890bb0ac1e01010a010101"]}) bind$xdp(r4, &(0x7f0000000140)={0x2c, 0x5, r7, 0x0, r3}, 0x10) 14:55:10 executing program 0: r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000020000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="080008005f526bae1400020000000000000000000000ff"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b525f}, @IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x34}}, 0x0) 14:55:10 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xa, &(0x7f0000000100)=@framed={{}, [@exit, @call={0x85, 0x0, 0x0, 0xc}, @btf_id, @exit, @call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 150.715143][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.776174][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.807557][ T8311] device bridge_slave_0 entered promiscuous mode [ 150.884873][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.903389][ T8311] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.917686][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.927787][ T8311] device bridge_slave_1 entered promiscuous mode [ 151.035388][ T8568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.071988][ T8311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.107743][ T8311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.265084][ T8311] team0: Port device team_slave_0 added [ 151.286914][ T8311] team0: Port device team_slave_1 added [ 151.382329][ T8311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.393325][ T8311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.435723][ T8311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.465472][ T8311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.472485][ T8311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.502810][ T8311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.611151][ T8311] device hsr_slave_0 entered promiscuous mode [ 151.620141][ T8311] device hsr_slave_1 entered promiscuous mode [ 151.629412][ T8311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.638126][ T8311] Cannot create hsr debugfs directory [ 151.836746][ T8311] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.850465][ T8311] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.861175][ T8311] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.878342][ T8311] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.984723][ T8311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.005112][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 152.013408][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 152.034071][ T8311] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.050159][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 152.060323][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 152.084604][ T7553] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.091750][ T7553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.127416][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.137028][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.147160][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.157131][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.164293][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.174364][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 152.183316][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 152.208135][ T1052] Bluetooth: hci5: command 0x0409 tx timeout [ 152.247716][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 152.257126][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 152.274961][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 152.294250][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 152.302842][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 152.335159][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 152.355193][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 152.363673][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 152.398306][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 152.415904][ T8005] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 152.456523][ T7553] Bluetooth: hci2: command 0x041b tx timeout [ 152.470263][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 152.478716][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 152.501690][ T8311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.752486][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.763070][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.826716][ T8005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.845143][ T8005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.867666][ T8311] device veth0_vlan entered promiscuous mode [ 152.877592][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 152.886450][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.912365][ T8311] device veth1_vlan entered promiscuous mode [ 152.969926][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 152.994590][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 153.002754][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 153.024483][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 153.036653][ T8311] device veth0_macvtap entered promiscuous mode [ 153.070774][ T8311] device veth1_macvtap entered promiscuous mode [ 153.107202][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.133892][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.155606][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.183736][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.193588][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.223815][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.243819][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.263751][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.273601][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 153.314101][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.335422][ T8311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.366821][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 153.377088][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 153.388973][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 153.429270][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 153.457104][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.472735][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.515831][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.543824][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.563735][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.583756][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.593589][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.623817][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.663823][ T8311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 153.676068][ T8311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.689658][ T8311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.704372][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 153.722379][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 153.748819][ T8311] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.772597][ T8311] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.793017][ T8311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.819663][ T8311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.991342][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.038919][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.062339][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 154.062695][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.117830][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.142945][ T7553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 154.267788][ T8871] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 154.304196][ T20] Bluetooth: hci5: command 0x041b tx timeout [ 154.348674][ T8871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.386143][ T8885] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 154.430973][ T8885] bond2 (uninitialized): Released all slaves 14:55:14 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="a2e6d7af", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) 14:55:14 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4081, 0xff1}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000000c0)="8d455533a8fd49b30dbfe07c920d1ff4bcc8c4722dfc22bf9ca06a16a1d574b1e9d0d1300167847d4604b3bffb40210851fc4a526408f70cde56010b0ea105f18b92cdb1f5daeadebee4d8089e469b52e3344b971ef5841a3b30d802b7bd63c6204e5eb9dc07e35c6c99a194ac91a76a1ed2e54a7b369ee6", 0x78}, {&(0x7f0000001280)="81ff347d5bb00565516e57d03b3e485be647d0049897d6cfb4d5338f96b5b408c438a664ff2b298bb81c394cb542271e0d2e097d133d456165ba188a02777dc2f3f409e3a1582954f910f565ae74cb8d8a39c98cd47f1ea4f11593b18dff8a56ce3619f18a546a8f5754f8d3045f755844c79f62952df324d2483c76b4eb020af26875690c84064a", 0x88}], 0x2, &(0x7f00000019c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) writev(r1, &(0x7f00000018c0)=[{&(0x7f0000001340)='*', 0x1}, {0x0}], 0x2) 14:55:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x6}, 0x0) 14:55:14 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x140, 0x9403, 0x5, 0x0, 0x2c0, 0x230, 0x3d8, 0x3d8, 0x230, 0x3d8, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'macvlan0\x00', 'veth0_to_bond\x00'}, 0x0, 0x118, 0x140, 0x0, {0xff00000000000000}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x4976f705bbaef330}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) 14:55:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000009c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x48}}, 0x0) [ 154.553858][ T8005] Bluetooth: hci2: command 0x040f tx timeout 14:55:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x6}, 0x0) 14:55:14 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000880)={0xa, 0x0, 0x0, @remote}, 0x17, 0x0, 0x0, &(0x7f0000000b40)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @private}]}}}], 0x28}}], 0x2, 0x0) 14:55:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="8f", 0x1}], 0x1}, 0xe0) 14:55:15 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="a2e6d7af", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) 14:55:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={0x0}}, 0x40000) unshare(0x40000000) unshare(0x0) r1 = socket(0x11, 0x800000003, 0x0) unshare(0x48020000) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000024000b0f000000004000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000007000100667100000c00020008000700ffff0000280008801c000100ff8000000000eeff0000000000000000000000000100000006000200080000007ebeee72a024a5abc7aca59f8809f0ca9e35355c6f3e23405f2541f6ef"], 0x60}}, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r4, &(0x7f0000000d00), 0x1bdd307, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="69705f76746930000000000000cf0000", @ANYRES32=r2, @ANYBLOB="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"]}) bind$xdp(r4, &(0x7f0000000140)={0x2c, 0x5, r7, 0x0, r3}, 0x10) 14:55:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000940)={'wpan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r3, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x1c}, 0x6}, 0x0) 14:55:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000140)=""/149, 0x26, 0x95, 0x1}, 0x20) 14:55:15 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="a2e6d7af", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) 14:55:15 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x54e, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="050346003e0000000200c52cf7c25975e605b02ff1057f2b2ff0dac8897c6b11876d886b143a301817cc2b604fd3216c62e36ff9d5a2de4e0f09cbafaed0d51cc5471d130a6632a8810002000089b6a2", 0x50, 0x0, 0x0, 0x0) 14:55:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)={'security\x00', 0x2, [{}, {}]}, 0x48) 14:55:15 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 14:55:16 executing program 2: recvmsg(0xffffffffffffffff, 0x0, 0x59f7ea27b55d8268) 14:55:16 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x0, 0x0, {0xa, 0x81}, [@IFA_ADDRESS={0x14, 0x1, @dev}, @IFA_ADDRESS={0x14, 0x1, @mcast2}]}, 0x40}}, 0x0) 14:55:16 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f00000000c0)="a2e6d7af", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, 0x0, 0xfdef) 14:55:16 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x41) unshare(0x4a000400) 14:55:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0xaa7bfc88451748a3}, 0x1c}}, 0x0) [ 156.384185][ T1052] Bluetooth: hci5: command 0x040f tx timeout 14:55:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={0x0}}, 0x40000) unshare(0x40000000) unshare(0x0) r1 = socket(0x11, 0x800000003, 0x0) unshare(0x48020000) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000024000b0f000000004000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000007000100667100000c00020008000700ffff0000280008801c000100ff8000000000eeff0000000000000000000000000100000006000200080000007ebeee72a024a5abc7aca59f8809f0ca9e35355c6f3e23405f2541f6ef"], 0x60}}, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r4, &(0x7f0000000d00), 0x1bdd307, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="69705f76746930000000000000cf0000", @ANYRES32=r2, @ANYBLOB="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"]}) bind$xdp(r4, &(0x7f0000000140)={0x2c, 0x5, r7, 0x0, r3}, 0x10) 14:55:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:55:16 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) getpeername(r0, 0x0, &(0x7f0000000000)) 14:55:16 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}]}, 0x18}}, 0x0) 14:55:16 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000000), 0x4) 14:55:16 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x41) unshare(0x4a000400) [ 156.613917][ T1052] Bluetooth: hci2: command 0x0419 tx timeout 14:55:16 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 14:55:16 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:55:16 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x12, 0x515, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "01000500"}]}, 0x54}}, 0x0) 14:55:17 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000a00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 14:55:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:55:17 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) [ 157.224605][ T9133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.294284][ T9133] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={0x0}}, 0x40000) unshare(0x40000000) unshare(0x0) r1 = socket(0x11, 0x800000003, 0x0) unshare(0x48020000) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6000000024000b0f000000004000000000000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000007000100667100000c00020008000700ffff0000280008801c000100ff8000000000eeff0000000000000000000000000100000006000200080000007ebeee72a024a5abc7aca59f8809f0ca9e35355c6f3e23405f2541f6ef"], 0x60}}, 0x0) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendmmsg(r4, &(0x7f0000000d00), 0x1bdd307, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008800) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="69705f76746930000000000000cf0000", @ANYRES32=r2, @ANYBLOB="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"]}) bind$xdp(r4, &(0x7f0000000140)={0x2c, 0x5, r7, 0x0, r3}, 0x10) 14:55:17 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x41) unshare(0x4a000400) 14:55:17 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtaction={0x898, 0x30, 0x16065126a33bff1f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x5}}}, @TCA_POLICE_RATE={0x404}, @TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x20000000000000}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x898}}, 0x0) 14:55:17 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}]}, 0x18}}, 0x0) 14:55:17 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:55:17 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000a00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 14:55:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0x2a0}], 0x2, 0x20000844) [ 157.802989][ T9204] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:18 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000004c0)=@file={0x1, './file1\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 14:55:18 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000a00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 14:55:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0x2a0}], 0x2, 0x20000844) 14:55:18 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x41) unshare(0x4a000400) 14:55:18 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000004c0)=@file={0x1, './file1\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) [ 158.270504][ T9279] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.454536][ T7526] Bluetooth: hci5: command 0x0419 tx timeout 14:55:18 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0x2a0}], 0x2, 0x20000844) 14:55:18 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000a00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xb6ea6f9b087d72b3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}]}]}]}}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 14:55:18 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000004c0)=@file={0x1, './file1\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) [ 158.696934][ T9321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:18 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}]}, 0x18}}, 0x0) 14:55:18 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0x2a0}], 0x2, 0x20000844) 14:55:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0x2a0}], 0x2, 0x20000844) 14:55:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775b0d5e383e5b3c066ff000000e2", 0x10) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) 14:55:19 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000004c0)=@file={0x1, './file1\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) 14:55:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000cd5600000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x8c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x5c, 0x2, [@TCA_ROUTE4_ACT={0x58, 0x6, [@m_simple={0x3a, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 14:55:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0x2a0}], 0x2, 0x20000844) [ 159.139245][ T9345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:19 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000b00)={0x0, 'bridge_slave_1\x00', {}, 0xff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3b854b1c8c768c001496fa99ce5b5040be959096ea948cfa8e7194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc175876410c02889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bffffff00004000632977fbac141442e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x7fffffff, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 159.218471][ T9345] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 159.342161][ T9345] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) socket$nl_generic(0x10, 0x3, 0x10) [ 159.415022][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:19 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) sendmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="f4", 0x1}], 0x1}, 0x2a0}], 0x2, 0x20000844) [ 159.514143][ T9351] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.563612][ T9370] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:55:19 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}]}, 0x18}}, 0x0) 14:55:19 executing program 0: syz_emit_ethernet(0xbe, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @local, {[@noop, @generic={0x0, 0xc, "13000000000000000000"}, @ssrr={0x89, 0xb, 0x0, [@remote, @dev]}, @cipso={0x86, 0x65, 0x0, [{0x0, 0x8, "800000000000"}, {0x0, 0x12, "60d82474f42a627821f6b8035211b584"}, {0x0, 0xf, "549c610726e1d66ba7791e50e5"}, {0x0, 0xb, "7f05fe1ebc49279061"}, {0x0, 0x2}, {0x0, 0x12, "0c57b549158e146dab91d54093e05534"}, {0x0, 0x11, "a31c24f994fe3cab1d6e08763bc6b6"}, {0x0, 0x6, "7b3b9922"}]}]}}}}}}}, 0x0) 14:55:20 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) 14:55:20 executing program 0: syz_emit_ethernet(0xbe, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @local, {[@noop, @generic={0x0, 0xc, "13000000000000000000"}, @ssrr={0x89, 0xb, 0x0, [@remote, @dev]}, @cipso={0x86, 0x65, 0x0, [{0x0, 0x8, "800000000000"}, {0x0, 0x12, "60d82474f42a627821f6b8035211b584"}, {0x0, 0xf, "549c610726e1d66ba7791e50e5"}, {0x0, 0xb, "7f05fe1ebc49279061"}, {0x0, 0x2}, {0x0, 0x12, "0c57b549158e146dab91d54093e05534"}, {0x0, 0x11, "a31c24f994fe3cab1d6e08763bc6b6"}, {0x0, 0x6, "7b3b9922"}]}]}}}}}}}, 0x0) 14:55:20 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) socket$nl_generic(0x10, 0x3, 0x10) 14:55:20 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) socket$nl_generic(0x10, 0x3, 0x10) 14:55:20 executing program 0: syz_emit_ethernet(0xbe, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @local, {[@noop, @generic={0x0, 0xc, "13000000000000000000"}, @ssrr={0x89, 0xb, 0x0, [@remote, @dev]}, @cipso={0x86, 0x65, 0x0, [{0x0, 0x8, "800000000000"}, {0x0, 0x12, "60d82474f42a627821f6b8035211b584"}, {0x0, 0xf, "549c610726e1d66ba7791e50e5"}, {0x0, 0xb, "7f05fe1ebc49279061"}, {0x0, 0x2}, {0x0, 0x12, "0c57b549158e146dab91d54093e05534"}, {0x0, 0x11, "a31c24f994fe3cab1d6e08763bc6b6"}, {0x0, 0x6, "7b3b9922"}]}]}}}}}}}, 0x0) 14:55:20 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 14:55:20 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000b00)={0x0, 'bridge_slave_1\x00', {}, 0xff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x7fffffff, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 14:55:21 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f0, 0x0, 0x3b8, 0x220, 0x98, 0x98, 0x220, 0x458, 0x458, 0x458, 0x458, 0x6, 0x0, {[{{@ip={@empty, @private, 0x0, 0x0, 'team_slave_0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'wg2\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@dev, @local, 0x0, 0x0, 'rose0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:ld_so_cache_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) 14:55:21 executing program 0: syz_emit_ethernet(0xbe, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @local, {[@noop, @generic={0x0, 0xc, "13000000000000000000"}, @ssrr={0x89, 0xb, 0x0, [@remote, @dev]}, @cipso={0x86, 0x65, 0x0, [{0x0, 0x8, "800000000000"}, {0x0, 0x12, "60d82474f42a627821f6b8035211b584"}, {0x0, 0xf, "549c610726e1d66ba7791e50e5"}, {0x0, 0xb, "7f05fe1ebc49279061"}, {0x0, 0x2}, {0x0, 0x12, "0c57b549158e146dab91d54093e05534"}, {0x0, 0x11, "a31c24f994fe3cab1d6e08763bc6b6"}, {0x0, 0x6, "7b3b9922"}]}]}}}}}}}, 0x0) 14:55:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) socket$nl_generic(0x10, 0x3, 0x10) 14:55:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 14:55:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) socket$nl_generic(0x10, 0x3, 0x10) 14:55:21 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000b00)={0x0, 'bridge_slave_1\x00', {}, 0xff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc04b82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3b854b1c8c768c001496fa99ce5b5040be959096ea948cfa8e7194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc175876410c02889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bffffff00004000632977fbac141442e934a0a662079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x7fffffff, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 14:55:21 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 14:55:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x10000}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x20) [ 161.971294][ T9441] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:55:22 executing program 5: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x101, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 14:55:22 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) socket$nl_generic(0x10, 0x3, 0x10) 14:55:22 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x2343a726) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) socket$nl_generic(0x10, 0x3, 0x10) 14:55:22 executing program 5: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x101, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 14:55:22 executing program 5: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x101, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 14:55:22 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000b00)={0x0, 'bridge_slave_1\x00', {}, 0xff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) splice(r3, 0x0, r5, 0x0, 0x7fffffff, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r6, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0) recvfrom$inet6(r6, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffd88) 14:55:23 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x101, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) [ 163.225986][ T9468] __nla_validate_parse: 4 callbacks suppressed [ 163.226005][ T9468] netlink: 53 bytes leftover after parsing attributes in process `syz-executor.4'. 14:55:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 14:55:23 executing program 5: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x101, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 14:55:23 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x101, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 14:55:23 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 14:55:23 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket(0x1d, 0x2, 0x6) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x6a, 0x1, 0x0, 0xc) 14:55:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000080)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x390, 0x390, 0xffffffff, 0x0, 0x0, 0x4c8, 0x4c8, 0xffffffff, 0x4c8, 0x4c8, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv4=@dev, @ipv6=@private2}}}, {{@ipv6={@private1, @empty, [], [], 'ip6tnl0\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x240}}, {{@ipv6={@mcast2, @mcast2, [], [], 'veth1\x00', 'veth0_vlan\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@local, @ipv6=@mcast1, @icmp_id}}}, {{@ipv6={@private2, @rand_addr=' \x01\x00', [], [], 'ip6_vti0\x00', 'tunl0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast2, @ipv4=@multicast1, @gre_key, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 14:55:23 executing program 1: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000080)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r3, 0x101, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 14:55:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/4119, 0x1017}], 0x2}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000002680)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="03", 0x1}], 0x1}, 0x0) sendmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000400)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000480)='z', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a0002840200400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 14:55:24 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2163], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = socket(0x1e, 0x1, 0x2) r1 = socket(0x15, 0x5, 0x8) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @l2tp={0x2, 0x0, @broadcast}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 0xce}, 0x100, 0x0, 0x0, 0x0, 0xefb3, &(0x7f0000000380)='syz_tun\x00', 0xffffffffffffffff, 0xb418, 0x8001}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) r3 = accept4(r1, &(0x7f0000000100)=@l2tp, &(0x7f0000000180)=0x80, 0x80000) socket(0x10, 0x2, 0x1) r4 = socket(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x79e7b98df288cf76}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b600100000000000000000", @ANYRES32=r6, @ANYBLOB="00000500f17f0100f2ff02002703b036b550271faf9b88e6d8eded40ef47129e37036ab6b777f61d4b139eb60692f5d44e4f40b7176712e6daa9bea7488029c4128ccbc74a58e5d0e7759f5d"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000cc0), 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002400ef00000000000900000000000000", @ANYRES32=r8, @ANYBLOB="00ff030000ffffff00000000"], 0x24}}, 0x0) 14:55:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 14:55:24 executing program 5: r0 = socket(0x11, 0x3, 0x0) getsockname$unix(r0, 0x0, &(0x7f0000000080)) 14:55:24 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x20, 0x6, "ba1d3a5a9f9a"}}) 14:55:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 14:55:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x118, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "743cb7ca50de09c409bb90d7c8955ac554de98971fa8f826"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6c964105146b17d10c16402ee206ffbdfbd970005d110e1d"}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "60fc4125d7b9f7846c8c493f30f4b1fe4aae787f3b25f8ff"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "39df14fd573b1cbd4c7ddf76f24c9ddd9bc8a3a36824fb31"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x118}, 0x1, 0x0, 0x0, 0x40084}, 0x80) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 14:55:25 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2163], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = socket(0x1e, 0x1, 0x2) r1 = socket(0x15, 0x5, 0x8) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @l2tp={0x2, 0x0, @broadcast}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 0xce}, 0x100, 0x0, 0x0, 0x0, 0xefb3, &(0x7f0000000380)='syz_tun\x00', 0xffffffffffffffff, 0xb418, 0x8001}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) r3 = accept4(r1, &(0x7f0000000100)=@l2tp, &(0x7f0000000180)=0x80, 0x80000) socket(0x10, 0x2, 0x1) r4 = socket(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x79e7b98df288cf76}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b600100000000000000000", @ANYRES32=r6, @ANYBLOB="00000500f17f0100f2ff02002703b036b550271faf9b88e6d8eded40ef47129e37036ab6b777f61d4b139eb60692f5d44e4f40b7176712e6daa9bea7488029c4128ccbc74a58e5d0e7759f5d"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000cc0), 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002400ef00000000000900000000000000", @ANYRES32=r8, @ANYBLOB="00ff030000ffffff00000000"], 0x24}}, 0x0) 14:55:25 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 14:55:25 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2163], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = socket(0x1e, 0x1, 0x2) r1 = socket(0x15, 0x5, 0x8) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @l2tp={0x2, 0x0, @broadcast}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 0xce}, 0x100, 0x0, 0x0, 0x0, 0xefb3, &(0x7f0000000380)='syz_tun\x00', 0xffffffffffffffff, 0xb418, 0x8001}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) r3 = accept4(r1, &(0x7f0000000100)=@l2tp, &(0x7f0000000180)=0x80, 0x80000) socket(0x10, 0x2, 0x1) r4 = socket(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x79e7b98df288cf76}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b600100000000000000000", @ANYRES32=r6, @ANYBLOB="00000500f17f0100f2ff02002703b036b550271faf9b88e6d8eded40ef47129e37036ab6b777f61d4b139eb60692f5d44e4f40b7176712e6daa9bea7488029c4128ccbc74a58e5d0e7759f5d"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000cc0), 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002400ef00000000000900000000000000", @ANYRES32=r8, @ANYBLOB="00ff030000ffffff00000000"], 0x24}}, 0x0) 14:55:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/4119, 0x1017}], 0x2}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000002680)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="03", 0x1}], 0x1}, 0x0) sendmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000400)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000480)='z', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a0002840200400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 14:55:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2163], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = socket(0x1e, 0x1, 0x2) r1 = socket(0x15, 0x5, 0x8) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @l2tp={0x2, 0x0, @broadcast}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 0xce}, 0x100, 0x0, 0x0, 0x0, 0xefb3, &(0x7f0000000380)='syz_tun\x00', 0xffffffffffffffff, 0xb418, 0x8001}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) r3 = accept4(r1, &(0x7f0000000100)=@l2tp, &(0x7f0000000180)=0x80, 0x80000) socket(0x10, 0x2, 0x1) r4 = socket(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x79e7b98df288cf76}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b600100000000000000000", @ANYRES32=r6, @ANYBLOB="00000500f17f0100f2ff02002703b036b550271faf9b88e6d8eded40ef47129e37036ab6b777f61d4b139eb60692f5d44e4f40b7176712e6daa9bea7488029c4128ccbc74a58e5d0e7759f5d"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000cc0), 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002400ef00000000000900000000000000", @ANYRES32=r8, @ANYBLOB="00ff030000ffffff00000000"], 0x24}}, 0x0) 14:55:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x51fa9ff57b932993, r0, 0x0) 14:55:26 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2163], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = socket(0x1e, 0x1, 0x2) r1 = socket(0x15, 0x5, 0x8) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @l2tp={0x2, 0x0, @broadcast}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 0xce}, 0x100, 0x0, 0x0, 0x0, 0xefb3, &(0x7f0000000380)='syz_tun\x00', 0xffffffffffffffff, 0xb418, 0x8001}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) r3 = accept4(r1, &(0x7f0000000100)=@l2tp, &(0x7f0000000180)=0x80, 0x80000) socket(0x10, 0x2, 0x1) r4 = socket(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x79e7b98df288cf76}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b600100000000000000000", @ANYRES32=r6, @ANYBLOB="00000500f17f0100f2ff02002703b036b550271faf9b88e6d8eded40ef47129e37036ab6b777f61d4b139eb60692f5d44e4f40b7176712e6daa9bea7488029c4128ccbc74a58e5d0e7759f5d"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000cc0), 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002400ef00000000000900000000000000", @ANYRES32=r8, @ANYBLOB="00ff030000ffffff00000000"], 0x24}}, 0x0) 14:55:26 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 14:55:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/4119, 0x1017}], 0x2}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000002680)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="03", 0x1}], 0x1}, 0x0) sendmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000400)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000480)='z', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a0002840200400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 14:55:26 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2163], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = socket(0x1e, 0x1, 0x2) r1 = socket(0x15, 0x5, 0x8) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @l2tp={0x2, 0x0, @broadcast}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 0xce}, 0x100, 0x0, 0x0, 0x0, 0xefb3, &(0x7f0000000380)='syz_tun\x00', 0xffffffffffffffff, 0xb418, 0x8001}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) r3 = accept4(r1, &(0x7f0000000100)=@l2tp, &(0x7f0000000180)=0x80, 0x80000) socket(0x10, 0x2, 0x1) r4 = socket(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x79e7b98df288cf76}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b600100000000000000000", @ANYRES32=r6, @ANYBLOB="00000500f17f0100f2ff02002703b036b550271faf9b88e6d8eded40ef47129e37036ab6b777f61d4b139eb60692f5d44e4f40b7176712e6daa9bea7488029c4128ccbc74a58e5d0e7759f5d"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000cc0), 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002400ef00000000000900000000000000", @ANYRES32=r8, @ANYBLOB="00ff030000ffffff00000000"], 0x24}}, 0x0) [ 166.448104][ T25] audit: type=1804 audit(1634568926.587:2): pid=9568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir880681508/syzkaller.WdEHN8/20/cgroup.controllers" dev="sda1" ino=14000 res=1 errno=0 14:55:27 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) write(r0, &(0x7f0000000200)="82ffffff8d000039777861cf3e425904032ec78194858000a4eecee5", 0x1c) 14:55:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/2163], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) r0 = socket(0x1e, 0x1, 0x2) r1 = socket(0x15, 0x5, 0x8) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, @l2tp={0x2, 0x0, @broadcast}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 0xce}, 0x100, 0x0, 0x0, 0x0, 0xefb3, &(0x7f0000000380)='syz_tun\x00', 0xffffffffffffffff, 0xb418, 0x8001}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) r3 = accept4(r1, &(0x7f0000000100)=@l2tp, &(0x7f0000000180)=0x80, 0x80000) socket(0x10, 0x2, 0x1) r4 = socket(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x79e7b98df288cf76}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b600100000000000000000", @ANYRES32=r6, @ANYBLOB="00000500f17f0100f2ff02002703b036b550271faf9b88e6d8eded40ef47129e37036ab6b777f61d4b139eb60692f5d44e4f40b7176712e6daa9bea7488029c4128ccbc74a58e5d0e7759f5d"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x8000) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000cc0), 0x10) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000002400ef00000000000900000000000000", @ANYRES32=r8, @ANYBLOB="00ff030000ffffff00000000"], 0x24}}, 0x0) 14:55:27 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 14:55:27 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c1e0309001a03a000", 0x33a) 14:55:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) 14:55:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}}, 0x0) [ 167.410233][ T25] audit: type=1804 audit(1634568927.547:3): pid=9587 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir880681508/syzkaller.WdEHN8/21/cgroup.controllers" dev="sda1" ino=14000 res=1 errno=0 14:55:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x5, 0x84) recvmsg$kcm(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000003ec0)=""/4119, 0x1017}], 0x2}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000002680)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="03", 0x1}], 0x1}, 0x0) sendmmsg(r1, &(0x7f00000021c0)=[{{&(0x7f0000000400)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000480)='z', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000040)=[{&(0x7f0000000380)="480000001400e702095f9f95274b0a0002840200400402000000000000006fab078a6a36d47a56aa68c6f8c36d96bd7c497626ff00034000d90000000000000000634310e68b0c89", 0x48}], 0x1}, 0x0) 14:55:27 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x1, &(0x7f00000001c0)=@raw=[@alu], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000780)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000c40)=[@hopopts_2292={{0x18, 0x29, 0x3e}}], 0x18}}], 0x2, 0x0) 14:55:28 executing program 1: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum={0x2}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x40}, 0x20) 14:55:28 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x1, &(0x7f00000001c0)=@raw=[@alu], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 14:55:28 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @remote}}) 14:55:28 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x1, &(0x7f00000001c0)=@raw=[@alu], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 168.180998][ T25] audit: type=1800 audit(1634568928.317:4): pid=9598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=13940 res=0 errno=0 14:55:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x200) [ 168.305210][ T25] audit: type=1804 audit(1634568928.397:5): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir880681508/syzkaller.WdEHN8/22/cgroup.controllers" dev="sda1" ino=13948 res=1 errno=0 14:55:28 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) 14:55:28 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x1, &(0x7f00000001c0)=@raw=[@alu], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) 14:55:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000012c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000010) 14:55:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) 14:55:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) [ 169.048309][ T25] audit: type=1804 audit(1634568929.187:6): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir880681508/syzkaller.WdEHN8/23/cgroup.controllers" dev="sda1" ino=14008 res=1 errno=0 14:55:29 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) 14:55:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) 14:55:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) 14:55:30 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x200) 14:55:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) 14:55:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x30}}, 0x0) 14:55:30 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "76feaa"}) 14:55:30 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x0, @dev}}) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff99, 0x0) 14:55:31 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) 14:55:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) 14:55:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) 14:55:31 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x200) 14:55:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0xb1d000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)) r3 = socket$inet6(0xa, 0x1, 0x5) sendto$inet6(r3, &(0x7f0000000280)="4372037dcf7582b02a196f35604f1f3487e0d79104fc2b3b5dd86b130a882440a03f5ef3d593d9d4dcfccc1f0acef2b2512e5f98a5ebe56e42d6bbe7722ee997ea5042745abc7370", 0x48, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x5b00, 0x0, 0xe001900) 14:55:32 executing program 5: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, r2, 0x4c4a997a53e05625, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) 14:55:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2c, r1, 0x21, 0x0, 0x0, {0x8}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) 14:55:32 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x2, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 172.533510][ T9514] Bluetooth: hci0: command 0x0401 tx timeout 14:55:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 14:55:32 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendfile(r3, r0, 0x0, 0x200) 14:55:32 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=0x1, 0xffffffffffffffff, 0x5}, 0x10) 14:55:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_LINK_NETNSID={0x8}]}, 0x3c}}, 0x0) 14:55:33 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x300}]}, 0x18}}, 0x0) 14:55:33 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4000000000000006111440000000000c600000000000000950000000000000049a4050000000000000000000000000000c8445ee91769c7bbd8fe2a4d2aacccadd2e3cdd1b77e1a3429ebced2918a5a104dd1eb83a7e5e3cf308921f898645be791ec0fb87155ea118e"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) pipe(&(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e25, 0x0, @loopback}}, 0x0, 0x0, 0x1e, 0x0, "75f1f1deff5ea649636f38aa83a31e36c5eef049c0b7381a390df80bcdab017d96189f419995bdbf1f71a4505c5ec2aec17a4aa2c90d9f0525ee13765822d60308da1666b14d2ca3b300"}, 0xd8) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="747e905520af"}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0404000003013bfe"], 0x1104}], 0x1}, 0x0) read(r4, &(0x7f0000000040)=""/224, 0xfffffee0) sendmsg$netlink(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) 14:55:33 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) 14:55:33 executing program 0: setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000ac1414000000000005000000ac1e0046000000006401010100000000ff"], 0x24) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, 0xfe27}, &(0x7f0000000100)=0x30) 14:55:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x24, r1, 0x501, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NODE={0x4}]}, 0x24}}, 0x0) 14:55:33 executing program 4: socketpair(0x28, 0x5, 0x0, &(0x7f0000000140)) 14:55:33 executing program 5: r0 = socket(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(xts-camellia-aesni,crct10dif)\x00'}, 0x58) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) [ 173.304487][ T9761] netlink: 1008 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:33 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000000080), 0x72a, 0x0, 0x0) close(r1) 14:55:33 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @log={{0x8}, @void}}]}], {0x14, 0x10}}, 0x90}}, 0x0) [ 173.623415][ T9766] netlink: 2288 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.060376][ T9787] netlink: 1008 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.103925][ T9788] netlink: 2288 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:34 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x21, @multicast, 'veth0_vlan\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r0, 0x40047452, &(0x7f0000000040)) 14:55:34 executing program 4: socketpair(0x28, 0x5, 0x0, &(0x7f0000000140)) 14:55:34 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001bc0)=@bpf_tracing={0x1a, 0x7000000, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) [ 174.268870][ T9795] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:35 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4000000000000006111440000000000c600000000000000950000000000000049a4050000000000000000000000000000c8445ee91769c7bbd8fe2a4d2aacccadd2e3cdd1b77e1a3429ebced2918a5a104dd1eb83a7e5e3cf308921f898645be791ec0fb87155ea118e"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) pipe(&(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e25, 0x0, @loopback}}, 0x0, 0x0, 0x1e, 0x0, "75f1f1deff5ea649636f38aa83a31e36c5eef049c0b7381a390df80bcdab017d96189f419995bdbf1f71a4505c5ec2aec17a4aa2c90d9f0525ee13765822d60308da1666b14d2ca3b300"}, 0xd8) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="747e905520af"}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0404000003013bfe"], 0x1104}], 0x1}, 0x0) read(r4, &(0x7f0000000040)=""/224, 0xfffffee0) sendmsg$netlink(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) 14:55:35 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@dev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x10) 14:55:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 14:55:35 executing program 4: socketpair(0x28, 0x5, 0x0, &(0x7f0000000140)) 14:55:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) 14:55:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="91410ab2c1db7468511f5b8e0ceacd4cd3fb100bd19b504b9a726ef482959a7604741ef5acd41d8bdcd213a01967ef82028d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f00000000c0)=""/122, 0xe, 0x0) close(r0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) [ 175.111313][ T9825] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:35 executing program 4: socketpair(0x28, 0x5, 0x0, &(0x7f0000000140)) [ 175.295928][ T9848] netlink: 1008 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) [ 175.639979][ T9853] netlink: 2288 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="91410ab2c1db7468511f5b8e0ceacd4cd3fb100bd19b504b9a726ef482959a7604741ef5acd41d8bdcd213a01967ef82028d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f00000000c0)=""/122, 0xe, 0x0) close(r0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 14:55:35 executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002680)=ANY=[@ANYBLOB="6c00000030000b000000000000000000000000005800010054000100080001006e6174"], 0x6c}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:55:36 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf670000000000004506000023ff07006706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af0100008000000000b1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a8100000000000000810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955ccefa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888f00000000000000049bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674009709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000080bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) [ 175.894726][ T9861] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) [ 176.033218][ T9865] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. 14:55:36 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4000000000000006111440000000000c600000000000000950000000000000049a4050000000000000000000000000000c8445ee91769c7bbd8fe2a4d2aacccadd2e3cdd1b77e1a3429ebced2918a5a104dd1eb83a7e5e3cf308921f898645be791ec0fb87155ea118e"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) pipe(&(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e25, 0x0, @loopback}}, 0x0, 0x0, 0x1e, 0x0, "75f1f1deff5ea649636f38aa83a31e36c5eef049c0b7381a390df80bcdab017d96189f419995bdbf1f71a4505c5ec2aec17a4aa2c90d9f0525ee13765822d60308da1666b14d2ca3b300"}, 0xd8) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="747e905520af"}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0404000003013bfe"], 0x1104}], 0x1}, 0x0) read(r4, &(0x7f0000000040)=""/224, 0xfffffee0) sendmsg$netlink(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) 14:55:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto$packet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) 14:55:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0xb}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 14:55:36 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="91410ab2c1db7468511f5b8e0ceacd4cd3fb100bd19b504b9a726ef482959a7604741ef5acd41d8bdcd213a01967ef82028d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f00000000c0)=""/122, 0xe, 0x0) close(r0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 14:55:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000080000002d0301000000000095000000000000006916000000000000bf670000000000004506000023ff07006706000002000000070300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af0100008000000000b1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be4b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf70d742a8100000000000000810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955ccefa1f6ab689fde4de4e63ede20271a51445dc8da39e5b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc206004aeb0743eb2dc819b6cf5c8ac86d8a297dff0445a13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888f00000000000000049bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000000000bc00f674009709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d022cf74686e9fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000080bd0d0d703f37ca363f601ae899a53f6715a0a62a34b0c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe394ac000000000000000000000000000000437d57defb79ea"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 14:55:36 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 14:55:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x2f, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xfffffffffffffdaa, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x50}}, 0x0) 14:55:37 executing program 4: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, 0x0, 0x8) unshare(0x24020400) tee(r0, r2, 0x80, 0x0) 14:55:37 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x2, 0x3, 0x250, 0x0, 0x118, 0x118, 0x118, 0x0, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x1b8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@unspec=@rateest={{0x68}, {'team0\x00', '\x00', 0x4}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'sit0\x00', 'veth1\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b0) 14:55:37 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="91410ab2c1db7468511f5b8e0ceacd4cd3fb100bd19b504b9a726ef482959a7604741ef5acd41d8bdcd213a01967ef82028d"], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) pread64(r0, &(0x7f00000000c0)=""/122, 0xe, 0x0) close(r0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 14:55:37 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') sendmmsg$unix(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}}, {{&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{0x0, 0x3000000}], 0x1}}], 0x2, 0x0) 14:55:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f000001bb80)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8}, {0x8}, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x5decb653}]}}}}]}, 0x48}}, 0x0) 14:55:37 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4000000000000006111440000000000c600000000000000950000000000000049a4050000000000000000000000000000c8445ee91769c7bbd8fe2a4d2aacccadd2e3cdd1b77e1a3429ebced2918a5a104dd1eb83a7e5e3cf308921f898645be791ec0fb87155ea118e"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) pipe(&(0x7f00000002c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e25, 0x0, @loopback}}, 0x0, 0x0, 0x1e, 0x0, "75f1f1deff5ea649636f38aa83a31e36c5eef049c0b7381a390df80bcdab017d96189f419995bdbf1f71a4505c5ec2aec17a4aa2c90d9f0525ee13765822d60308da1666b14d2ca3b300"}, 0xd8) r1 = socket(0x200000000000011, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="747e905520af"}, 0x14) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x1000000000000020, 0x4) sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="0404000003013bfe"], 0x1104}], 0x1}, 0x0) read(r4, &(0x7f0000000040)=""/224, 0xfffffee0) sendmsg$netlink(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0409000000013f"], 0x1104}], 0x1}, 0x0) 14:55:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 14:55:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 14:55:37 executing program 4: socket(0xb, 0x0, 0x0) 14:55:37 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) 14:55:38 executing program 4: r0 = socket(0x200000000000011, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, 0xfffffffffffffffd}, 0x10) 14:55:38 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:55:38 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r0, 0x29, 0x15, &(0x7f0000000140)="e9064b5c3dce17791b44774fe12b8833a97d00e0", 0x14) 14:55:38 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000380)={0x0, {{0x2, 0x0, @multicast2}}, {{0x3, 0x0, @private}}}, 0x108) 14:55:38 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000400)={0x1d18}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='`', 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000840000000000000003e0"], 0x18}, 0x80fe) 14:55:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x10001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000030003b050000000000000000000000005c000100580001000b00010073616d706c6500002c00028008000500150000000800030005000000180002"], 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x10000051c) 14:55:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 179.063270][ T25] audit: type=1804 audit(1634568939.207:7): pid=9989 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir811938800/syzkaller.t2I2ha/43/cgroup.controllers" dev="sda1" ino=14058 res=1 errno=0 [ 179.102169][ T9987] __nla_validate_parse: 12 callbacks suppressed [ 179.102188][ T9987] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 14:55:39 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 14:55:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 179.161579][ T9987] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 14:55:39 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:55:39 executing program 2: r0 = socket(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) 14:55:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x10001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000030003b050000000000000000000000005c000100580001000b00010073616d706c6500002c00028008000500150000000800030005000000180002"], 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x10000051c) 14:55:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 14:55:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x10001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000030003b050000000000000000000000005c000100580001000b00010073616d706c6500002c00028008000500150000000800030005000000180002"], 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x10000051c) [ 180.217956][ T25] audit: type=1804 audit(1634568940.357:8): pid=10011 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir811938800/syzkaller.t2I2ha/44/cgroup.controllers" dev="sda1" ino=14058 res=1 errno=0 [ 180.253737][T10011] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.304857][T10011] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.405241][ T25] audit: type=1804 audit(1634568940.477:9): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir116203929/syzkaller.0XIp5D/35/cgroup.controllers" dev="sda1" ino=14100 res=1 errno=0 [ 180.415350][T10017] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 14:55:40 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:55:40 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 180.564603][T10017] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 14:55:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 14:55:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x10001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000030003b050000000000000000000000005c000100580001000b00010073616d706c6500002c00028008000500150000000800030005000000180002"], 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x10000051c) 14:55:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x10001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000030003b050000000000000000000000005c000100580001000b00010073616d706c6500002c00028008000500150000000800030005000000180002"], 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x10000051c) 14:55:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 181.402866][ T25] audit: type=1804 audit(1634568941.537:10): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir811938800/syzkaller.t2I2ha/45/cgroup.controllers" dev="sda1" ino=14072 res=1 errno=0 [ 181.414772][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.510063][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.516811][ T25] audit: type=1804 audit(1634568941.587:11): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir116203929/syzkaller.0XIp5D/36/cgroup.controllers" dev="sda1" ino=14094 res=1 errno=0 14:55:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 181.573959][T10038] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.604763][T10038] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 14:55:41 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 14:55:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 14:55:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x10001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000030003b050000000000000000000000005c000100580001000b00010073616d706c6500002c00028008000500150000000800030005000000180002"], 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x10000051c) 14:55:42 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000b00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x4, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x10efe10675dec16, 0x0) r4 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 14:55:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000040)={0x1, 0x10001}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000000030003b050000000000000000000000005c000100580001000b00010073616d706c6500002c00028008000500150000000800030005000000180002"], 0x70}}, 0x0) sendfile(r2, r1, 0x0, 0x10000051c) 14:55:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x7b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x1c) [ 182.551268][ T25] audit: type=1804 audit(1634568942.687:12): pid=10064 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir811938800/syzkaller.t2I2ha/46/cgroup.controllers" dev="sda1" ino=14099 res=1 errno=0 14:55:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x10, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x9}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x38}}, 0x0) [ 182.722118][ T25] audit: type=1804 audit(1634568942.857:13): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir116203929/syzkaller.0XIp5D/37/cgroup.controllers" dev="sda1" ino=14104 res=1 errno=0 14:55:43 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 14:55:43 executing program 0: r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x10d, 0x6}, 0x80, &(0x7f0000000140)=[{&(0x7f00000027c0)="02842700900608233e496d5671dc71ff06291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2", 0x46}], 0x1, 0x0, 0x0, 0x1a0}, 0x0) 14:55:43 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40040c1) 14:55:43 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x21}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:55:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, r4}, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 14:55:43 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 14:55:43 executing program 0: r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x10d, 0x6}, 0x80, &(0x7f0000000140)=[{&(0x7f00000027c0)="02842700900608233e496d5671dc71ff06291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2", 0x46}], 0x1, 0x0, 0x0, 0x1a0}, 0x0) 14:55:43 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 14:55:43 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000040)) 14:55:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@ipmr_newroute={0x1c, 0x18, 0x1}, 0x1c}}, 0x0) [ 183.392988][ T25] audit: type=1804 audit(1634568943.537:14): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir811938800/syzkaller.t2I2ha/47/cgroup.controllers" dev="sda1" ino=14099 res=1 errno=0 14:55:43 executing program 0: r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x10d, 0x6}, 0x80, &(0x7f0000000140)=[{&(0x7f00000027c0)="02842700900608233e496d5671dc71ff06291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2", 0x46}], 0x1, 0x0, 0x0, 0x1a0}, 0x0) 14:55:43 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x0, 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000004d40)={0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f00000037c0)="59c00135ae1f3fd63ba0ab5b6d450c9b1f0f203b9199511b33f483ae4aa056282f016e8af05d1a726795fa642079002d0cadb939e8fd71fe67af2475f76b3c91a12b8f5e89f96d73ca9be5a9dad2ac2799243d425240815d6ab59d8bdea4a6e92b09b0359c956b178d349b2691b0ee454a34c54f07d7e998ff84a6e54eb295fc631099b5232e869552e50b5578fc9d6809666f2fd68a0d93aa", 0x99}, {&(0x7f0000003880)="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", 0xd77}], 0x2}, 0x0) recvmmsg(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000004d80)=@delchain={0x24}, 0x24}}, 0x0) 14:55:43 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 14:55:43 executing program 1: socket(0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0xbb7, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f01) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x10) 14:55:43 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 14:55:43 executing program 0: r0 = socket$kcm(0x11, 0x8000000000000003, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001640), 0xff5f) sendmsg(r0, &(0x7f0000000440)={&(0x7f00000006c0)=@nfc={0x10d, 0x6}, 0x80, &(0x7f0000000140)=[{&(0x7f00000027c0)="02842700900608233e496d5671dc71ff06291b2c1501772502bb867063f70647862a15257781bcf1d1e498104d082833914ee68afc14ac7cb85975751b8c31271948ee303aa2", 0x46}], 0x1, 0x0, 0x0, 0x1a0}, 0x0) 14:55:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, r4}, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 14:55:44 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 14:55:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, r4}, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 14:55:44 executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000008740)=[{{0x0, 0x4, &(0x7f0000001780)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}}], 0x500, 0x0, 0x0) 14:55:44 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, r4}, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) [ 184.308146][ T25] audit: type=1804 audit(1634568944.447:15): pid=10133 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir811938800/syzkaller.t2I2ha/48/cgroup.controllers" dev="sda1" ino=14054 res=1 errno=0 14:55:44 executing program 5: r0 = socket$inet(0x2, 0x3, 0x5) sendmmsg$inet(r0, &(0x7f0000000540)=[{{&(0x7f0000000300)={0x2, 0x0, @private}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x14, 0x0, 0x8, {[@lsrr={0x83, 0x3}]}}}], 0x18}}], 0x2, 0x0) 14:55:44 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) close(r0) [ 184.546822][ T25] audit: type=1804 audit(1634568944.687:16): pid=10144 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir116203929/syzkaller.0XIp5D/40/cgroup.controllers" dev="sda1" ino=14122 res=1 errno=0 [ 184.733989][ T25] audit: type=1804 audit(1634568944.717:17): pid=10138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir628905172/syzkaller.KdG7Iy/47/cgroup.controllers" dev="sda1" ino=14119 res=1 errno=0 14:55:44 executing program 5: bpf$ENABLE_STATS(0x20, &(0x7f0000000000)={0x66}, 0x4) 14:55:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) close(r0) [ 184.845282][ T25] audit: type=1800 audit(1634568944.807:18): pid=10124 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=13940 res=0 errno=0 14:55:45 executing program 1: socket(0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0xbb7, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f01) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x10) 14:55:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, r4}, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 14:55:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) close(r0) 14:55:45 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x7}}], 0x48}, 0x0) 14:55:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, r4}, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 14:55:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, r4}, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 14:55:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) close(r0) 14:55:45 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x7}}], 0x48}, 0x0) [ 185.533608][ T25] audit: type=1804 audit(1634568945.677:19): pid=10164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir628905172/syzkaller.KdG7Iy/48/cgroup.controllers" dev="sda1" ino=14123 res=1 errno=0 14:55:45 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x7}}], 0x48}, 0x0) [ 185.701275][ T25] audit: type=1804 audit(1634568945.717:20): pid=10166 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir811938800/syzkaller.t2I2ha/49/cgroup.controllers" dev="sda1" ino=14124 res=1 errno=0 [ 185.881012][ T25] audit: type=1804 audit(1634568945.717:21): pid=10165 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir116203929/syzkaller.0XIp5D/41/cgroup.controllers" dev="sda1" ino=14122 res=1 errno=0 14:55:46 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x7}}], 0x48}, 0x0) 14:55:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, r4}, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 14:55:46 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x7}}], 0x48}, 0x0) 14:55:46 executing program 1: socket(0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0xbb7, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f01) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x10) 14:55:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, r4}, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 14:55:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x14, r4}, 0x14}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x10000a006) 14:55:46 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x7}}], 0x48}, 0x0) 14:55:46 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x7}}], 0x48}, 0x0) 14:55:46 executing program 5: socket(0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0xbb7, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f01) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x10) [ 186.632207][ T25] audit: type=1804 audit(1634568946.767:22): pid=10191 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir628905172/syzkaller.KdG7Iy/49/cgroup.controllers" dev="sda1" ino=14063 res=1 errno=0 [ 186.791626][ T25] audit: type=1804 audit(1634568946.837:23): pid=10194 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir811938800/syzkaller.t2I2ha/50/cgroup.controllers" dev="sda1" ino=14117 res=1 errno=0 14:55:47 executing program 3: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x2, 0x4, 0x4, 0x1}, 0x3c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x7, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map={0x18, 0x0, 0x2, 0x0, r0}, @exit]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000200)="ecb9"}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) [ 187.003699][ T25] audit: type=1804 audit(1634568946.987:24): pid=10200 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir116203929/syzkaller.0XIp5D/42/cgroup.controllers" dev="sda1" ino=14124 res=1 errno=0 14:55:47 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x5c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 14:55:47 executing program 4: unshare(0x4020000) unshare(0x20000) 14:55:47 executing program 0: r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000040000000280012000900010076657468"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x736481aeec441e73}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x8}}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) 14:55:47 executing program 4: unshare(0x4020000) unshare(0x20000) 14:55:47 executing program 2: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0xd}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', {0x2, 0x0, @remote}}) 14:55:47 executing program 1: socket(0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0xbb7, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f01) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x10) [ 187.633058][T10225] __nla_validate_parse: 6 callbacks suppressed [ 187.633078][T10225] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:47 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x5c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) [ 187.753737][T10227] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:55:48 executing program 5: socket(0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0xbb7, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f01) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x10) 14:55:48 executing program 4: unshare(0x4020000) unshare(0x20000) 14:55:48 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x5c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) [ 188.026418][T10263] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:48 executing program 4: unshare(0x4020000) unshare(0x20000) [ 188.140664][T10284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 14:55:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:55:48 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x6, 0x1, 0x5c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x23) 14:55:48 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}]}, 0x30}}, 0x0) 14:55:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) [ 188.504693][T10293] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:48 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:55:48 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmmsg$nfc_llcp(r0, &(0x7f0000000640)=[{0x0, 0x0, 0x0}], 0x1, 0x0) 14:55:48 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) [ 188.888044][T10318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:49 executing program 5: socket(0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e23, 0x0, @empty}], 0x1c) sendto$inet6(r1, &(0x7f0000000000)="ce", 0xbb7, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x32f01) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8004) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x10) 14:55:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}]}, 0x30}}, 0x0) 14:55:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280500001600", @ANYRES32], 0x528}}, 0x0) recvmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) 14:55:49 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010400000000000000001200000008000300", @ANYRES32=r5, @ANYBLOB="0a0006"], 0x30}}, 0x0) sendfile(r2, r1, 0x0, 0x11c000f00) 14:55:49 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 14:55:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_rsvp6={{0xa}, {0x4}}]}, 0x34}}, 0x0) r3 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000200), 0x4924924924926d3, 0x0) 14:55:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}]}, 0x30}}, 0x0) 14:55:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x8, 0x3, 0x0, 0x8}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20) [ 189.182061][T10347] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.237618][T10341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:55:49 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}]}, 0x30}}, 0x0) 14:55:49 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1c, 0x1, &(0x7f0000000180)=@raw=[@alu], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:55:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 14:55:49 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89a0, &(0x7f0000000000)) [ 189.655777][T10375] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 189.880002][T10401] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.897373][T10401] bond0: (slave bond1): Enslaving as an active interface with an up link [ 189.914515][T10417] device bridge1 entered promiscuous mode [ 189.929709][T10417] device bridge1 left promiscuous mode [ 189.939360][T10417] bond1: (slave vlan2): making interface the new active one [ 189.949133][T10417] device bridge1 entered promiscuous mode [ 189.959694][T10417] bond1: (slave vlan2): Enslaving as an active interface with an up link 14:55:50 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) 14:55:50 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x11, 0x0, 0x0) 14:55:50 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req={0x1000, 0x1, 0x1000000}, 0x10) 14:55:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x0, @dev}}, 0x0, 0x9, 0x18}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv0\x00', 0x90) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000400), 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000100)='>', 0x1}], 0x1}, 0x4040040) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12003, 0x0) [ 189.987165][T10401] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 14:55:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 14:55:50 executing program 5: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001c00030c000000000000000007"], 0x28}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, 0x0, &(0x7f0000000000)) bind$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 14:55:50 executing program 4: bpf$BPF_LINK_UPDATE(0x4, 0x0, 0xfffffffffffffe02) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @link_local, 'bridge0\x00'}}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x80831, 0xffffffffffffffff, 0x0) 14:55:50 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x42, 0x0, 0x0, 0x0, 0x0, 'ec|'}}) 14:55:50 executing program 3: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x2000000000000000, &(0x7f0000001140)}, 0x4) bpf$BPF_GET_PROG_INFO(0x22, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = socket$inet(0x2, 0x80803, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x8, &(0x7f000000a300)=ANY=[@ANYBLOB="8d"], 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @broadcast}, 0x10) recvfrom$inet6(r0, &(0x7f00000003c0)=""/50, 0x32, 0xadc09c209e9a626c, &(0x7f00000000c0)={0xa, 0x4e25, 0x5, @empty, 0x8}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='p', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:55:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210100000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000100000000000000000002010000", @ANYRES32=r4], 0x20}}, 0x0) [ 190.270515][T10437] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 14:55:50 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/758], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0x15000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 14:55:50 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, &(0x7f0000000040)="f7", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x8}, 0x20) [ 190.473835][T10468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.482333][T10468] bond0: (slave bond2): Enslaving as an active interface with an up link 14:55:50 executing program 2: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000740)={0x1c, 0x2a, 0x5, 0x0, 0x0, "", [@nested={0x3}, @typed={0x8, 0x0, 0x0, 0x0, @u32}]}, 0x1c}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 14:55:50 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x1c, r0, 0x321, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 190.536909][T10481] device bridge3 entered promiscuous mode [ 190.564321][T10481] device bridge3 left promiscuous mode [ 190.612597][T10481] bond2: (slave vlan3): making interface the new active one [ 190.620166][T10481] device bridge3 entered promiscuous mode [ 190.672664][T10481] bond2: (slave vlan3): Enslaving as an active interface with an up link [ 190.710548][T10483] device lo entered promiscuous mode [ 190.718096][T10489] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.734964][T10481] syz-executor.1 (10481) used greatest stack depth: 21856 bytes left 14:55:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) [ 190.780956][T10499] netlink: 44368 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.809937][T10442] device lo left promiscuous mode 14:55:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210100000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000100000000000000000002010000", @ANYRES32=r4], 0x20}}, 0x0) [ 190.849219][T10452] device lo entered promiscuous mode [ 190.855505][T10526] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 14:55:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210100000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000100000000000000000002010000", @ANYRES32=r4], 0x20}}, 0x0) 14:55:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210100000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000100000000000000000002010000", @ANYRES32=r4], 0x20}}, 0x0) 14:55:51 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x1c, r0, 0x321, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 191.116741][T10442] device lo left promiscuous mode [ 191.123927][T10542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 191.132022][T10542] bond0: (slave bond3): Enslaving as an active interface with an up link 14:55:51 executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 191.217097][T10566] device bridge4 entered promiscuous mode [ 191.246386][T10566] device bridge4 left promiscuous mode [ 191.295624][T10566] bond3: (slave vlan4): making interface the new active one [ 191.319404][T10566] device bridge4 entered promiscuous mode [ 191.338573][T10566] bond3: (slave vlan4): Enslaving as an active interface with an up link 14:55:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0xa00, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000040}, 0x0) 14:55:51 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x1c, r0, 0x321, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 14:55:51 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x3}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x9c) 14:55:51 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210100000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000100000000000000000002010000", @ANYRES32=r4], 0x20}}, 0x0) 14:55:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210100000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000100000000000000000002010000", @ANYRES32=r4], 0x20}}, 0x0) [ 191.614902][T10627] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 14:55:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210100000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000100000000000000000002010000", @ANYRES32=r4], 0x20}}, 0x0) 14:55:52 executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x1c, r0, 0x321, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) [ 191.909592][T10627] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.939386][T10627] bond0: (slave bond4): Enslaving as an active interface with an up link [ 192.028671][T10647] device bridge5 entered promiscuous mode [ 192.063064][T10647] device bridge5 left promiscuous mode [ 192.098418][T10647] bond4: (slave vlan5): making interface the new active one [ 192.115251][T10647] device bridge5 entered promiscuous mode [ 192.130623][T10647] bond4: (slave vlan5): Enslaving as an active interface with an up link 14:55:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210100000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000100000000000000000002010000", @ANYRES32=r4], 0x20}}, 0x0) 14:55:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210100000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000100000000000000000002010000", @ANYRES32=r4], 0x20}}, 0x0) 14:55:52 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9000700, &(0x7f0000000140)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe0ba10a0015000300142603000e120800070000400b01a800160008000600e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 14:55:52 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x12) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 14:55:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x8000000000000003, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x40000000000024a, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001400210100000000000000000201"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010000100000000000000000002010000", @ANYRES32=r4], 0x20}}, 0x0) [ 192.455598][T10733] netlink: 'syz-executor.4': attribute type 21 has an invalid length. 14:55:52 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:55:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x3}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x9c) 14:55:52 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x3}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x9c) 14:55:52 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000002c0)={0x0, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @private=0xa010100}}}, 0x108) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) unshare(0x60000000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='x', @ANYRES16, @ANYBLOB="200027bd7000ffdbdf2502000000280001800800", @ANYRES32=0x0, @ANYBLOB="0800019909012df648792b93b42003b3ade200", @ANYRES32=0x0, @ANYBLOB="140002006e6574706369300000000000000000003c00018008000100", @ANYRES32=0x0], 0x78}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 14:55:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3c}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 14:55:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000600)) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000340)={0xf5, 0x2}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x9, @local, 0x8001}}, 0x0, 0x0, 0x0, 0x0, "30ea897c57f23fdb9856ecbdb6662ea0e959d225649afff3d5ddba83d88ac51da47808032dee740c08dba3da61780932a3efe69c18bc6d9dd6d277a44ee81bf0da27e18b2b4c9dc3bb1535055fb5a314"}, 0xd8) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 14:55:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98ed1c59a3311196b6c0cdf42295c9991eaea31f3d107c44"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b7546eaade8b287abf28276e70cfc7be1fc018f21c47127"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33c7113e4645e7faaec83a3aa684a404fe4acb23f3bd58ff"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e0ffafe89fe93aec63f5f61736182d2d364fd45b99a39351"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8be5bfc05e3614fd999428bffc66de18dddbe0652e3eff4e"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b1c7ce33b059e2451ce536b3b1ba468d2d47278da8c633b5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31da329f4c7e663587662def94457e24255bc6ab966b1d67"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x1c4}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff0802110000015050505050500000000000000004"], 0x50}}, 0x0) 14:55:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@ip_ttl={{0x10, 0x117}}], 0x10}}], 0x2, 0x0) 14:55:53 executing program 0: r0 = socket$inet(0x2, 0x840000000003, 0x2) setsockopt$inet_int(r0, 0x0, 0xcf, 0x0, 0x0) 14:55:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98ed1c59a3311196b6c0cdf42295c9991eaea31f3d107c44"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b7546eaade8b287abf28276e70cfc7be1fc018f21c47127"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33c7113e4645e7faaec83a3aa684a404fe4acb23f3bd58ff"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e0ffafe89fe93aec63f5f61736182d2d364fd45b99a39351"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8be5bfc05e3614fd999428bffc66de18dddbe0652e3eff4e"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b1c7ce33b059e2451ce536b3b1ba468d2d47278da8c633b5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31da329f4c7e663587662def94457e24255bc6ab966b1d67"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x1c4}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff0802110000015050505050500000000000000004"], 0x50}}, 0x0) 14:55:53 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@ip_ttl={{0x10, 0x117}}], 0x10}}], 0x2, 0x0) 14:55:53 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f90100000000000000f4ff03001f00000006020000000000"], 0x67b) unshare(0x40000000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340), 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x400004, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) getpeername$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 14:55:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98ed1c59a3311196b6c0cdf42295c9991eaea31f3d107c44"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b7546eaade8b287abf28276e70cfc7be1fc018f21c47127"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33c7113e4645e7faaec83a3aa684a404fe4acb23f3bd58ff"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e0ffafe89fe93aec63f5f61736182d2d364fd45b99a39351"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8be5bfc05e3614fd999428bffc66de18dddbe0652e3eff4e"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b1c7ce33b059e2451ce536b3b1ba468d2d47278da8c633b5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31da329f4c7e663587662def94457e24255bc6ab966b1d67"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x1c4}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff0802110000015050505050500000000000000004"], 0x50}}, 0x0) 14:55:53 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x3}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x9c) 14:55:53 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x3}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x9c) [ 193.820786][T10877] __nla_validate_parse: 11 callbacks suppressed [ 193.820803][T10877] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.054702][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.061131][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.463555][T10868] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:56 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000002c0)={0x0, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e22, @private=0xa010100}}}, 0x108) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) unshare(0x60000000) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='x', @ANYRES16, @ANYBLOB="200027bd7000ffdbdf2502000000280001800800", @ANYRES32=0x0, @ANYBLOB="0800019909012df648792b93b42003b3ade200", @ANYRES32=0x0, @ANYBLOB="140002006e6574706369300000000000000000003c00018008000100", @ANYRES32=0x0], 0x78}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 14:55:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@ip_ttl={{0x10, 0x117}}], 0x10}}], 0x2, 0x0) 14:55:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x1c4, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "98ed1c59a3311196b6c0cdf42295c9991eaea31f3d107c44"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b7546eaade8b287abf28276e70cfc7be1fc018f21c47127"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33c7113e4645e7faaec83a3aa684a404fe4acb23f3bd58ff"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e0ffafe89fe93aec63f5f61736182d2d364fd45b99a39351"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8be5bfc05e3614fd999428bffc66de18dddbe0652e3eff4e"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b1c7ce33b059e2451ce536b3b1ba468d2d47278da8c633b5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31da329f4c7e663587662def94457e24255bc6ab966b1d67"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x1c4}}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="32003300d0800000ffffffffffff0802110000015050505050500000000000000004"], 0x50}}, 0x0) 14:55:56 executing program 3: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x3}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x9c) 14:55:56 executing program 0: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f90100000000000000f4ff03001f00000006020000000000"], 0x67b) unshare(0x40000000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340), 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x400004, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) getpeername$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 14:55:56 executing program 1: r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f0000000380)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x98) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x9, 0x3}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x9c) 14:55:56 executing program 5: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f90100000000000000f4ff03001f00000006020000000000"], 0x67b) unshare(0x40000000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340), 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x400004, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) getpeername$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 14:55:56 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@ip_ttl={{0x10, 0x117}}], 0x10}}], 0x2, 0x0) [ 196.525490][T10958] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. 14:55:56 executing program 2: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c46ff0600f90100000000000000f4ff03001f00000006020000000000"], 0x67b) unshare(0x40000000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340), 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000040)=0x400004, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f1e041681846", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca000000b0"], 0x140}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) getpeername$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) splice(r1, 0x0, r0, 0x0, 0x406f408, 0x0) 14:55:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='scalable\x00', 0x9) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x100000530) 14:55:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r2, 0x0, 0xf03b0000) sendfile(r1, r0, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 14:55:58 executing program 1: pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b0000005731ac267bdd08002c000000bab3068ee0001f010000000080db0c000000000000000000000000000a00010000000043", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299fb6284070001000000fd85d16e7930af0ab6794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea000000f2ffffff00000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) write$binfmt_misc(r1, &(0x7f00000005c0)=ANY=[], 0x37cb1133) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) splice(r0, 0x0, r2, 0x0, 0x19410, 0x0) [ 255.487922][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.494297][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.565098][ T9514] Bluetooth: hci0: command 0x0406 tx timeout [ 257.571278][ T9514] Bluetooth: hci1: command 0x0406 tx timeout [ 262.684650][ T5] Bluetooth: hci3: command 0x0406 tx timeout [ 262.691038][ T5] Bluetooth: hci4: command 0x0406 tx timeout [ 272.923297][ T9516] Bluetooth: hci2: command 0x0406 tx timeout [ 283.162245][ T9512] Bluetooth: hci5: command 0x0406 tx timeout [ 316.922002][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.928355][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.676848][ T26] INFO: task kworker/u4:13:9182 blocked for more than 143 seconds. [ 354.684860][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 354.693597][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.705041][ T26] task:kworker/u4:13 state:D stack:25216 pid: 9182 ppid: 2 flags:0x00004000 [ 354.719717][ T26] Workqueue: netns cleanup_net [ 354.724847][ T26] Call Trace: [ 354.730770][ T26] __schedule+0xb44/0x5960 [ 354.735376][ T26] ? find_held_lock+0x2d/0x110 [ 354.742647][ T26] ? __mutex_lock+0x9c2/0x12f0 [ 354.749913][ T26] ? io_schedule_timeout+0x140/0x140 [ 354.755266][ T26] schedule+0xd3/0x270 [ 354.762261][ T26] schedule_preempt_disabled+0xf/0x20 [ 354.770494][ T26] __mutex_lock+0xa34/0x12f0 [ 354.775149][ T26] ? fib6_rules_net_exit+0xe/0x50 [ 354.783447][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 354.791347][ T26] ? pde_put+0x15d/0x1e0 [ 354.795725][ T26] ? remove_proc_entry+0x1e3/0x460 [ 354.802252][ T26] ? lockdep_hardirqs_on+0x79/0x100 [ 354.809570][ T26] ? __local_bh_enable_ip+0xa0/0x120 [ 354.814989][ T26] ? fib6_rule_suppress+0x2d0/0x2d0 [ 354.822662][ T26] fib6_rules_net_exit+0xe/0x50 [ 354.835991][ T26] ops_exit_list+0xb0/0x160 [ 354.848747][ T26] cleanup_net+0x4ea/0xb00 [ 354.853235][ T26] ? unregister_pernet_device+0x70/0x70 [ 354.860224][ T26] process_one_work+0x9bf/0x16b0 [ 354.865281][ T26] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 354.871916][ T26] ? rwlock_bug.part.0+0x90/0x90 [ 354.877489][ T26] ? _raw_spin_lock_irq+0x41/0x50 [ 354.882563][ T26] worker_thread+0x658/0x11f0 [ 354.887824][ T26] ? process_one_work+0x16b0/0x16b0 [ 354.893444][ T26] kthread+0x3e5/0x4d0 [ 354.898173][ T26] ? set_kthread_struct+0x130/0x130 [ 354.903409][ T26] ret_from_fork+0x1f/0x30 [ 354.908134][ T26] INFO: task syz-executor.0:10943 blocked for more than 143 seconds. [ 354.916357][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 354.922713][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.932029][ T26] task:syz-executor.0 state:D stack:26960 pid:10943 ppid: 6578 flags:0x00004004 [ 354.942696][ T26] Call Trace: [ 354.946054][ T26] __schedule+0xb44/0x5960 [ 354.951046][ T26] ? find_held_lock+0x2d/0x110 [ 354.955869][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 354.961200][ T26] ? io_schedule_timeout+0x140/0x140 [ 354.967113][ T26] schedule+0xd3/0x270 [ 354.971222][ T26] schedule_preempt_disabled+0xf/0x20 [ 354.978599][ T26] __mutex_lock+0xa34/0x12f0 [ 354.983326][ T26] ? ip_tunnel_init_net+0x2d5/0x9d0 [ 354.989339][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 354.994938][ T26] ? ip_tunnel_init_net+0x14e/0x9d0 [ 355.001207][ T26] ip_tunnel_init_net+0x2d5/0x9d0 [ 355.006282][ T26] ? ip_tunnel_changelink+0x540/0x540 [ 355.012159][ T26] ? ipgre_tap_exit_batch_net+0x20/0x20 [ 355.018575][ T26] ops_init+0xaf/0x470 [ 355.022676][ T26] setup_net+0x40f/0xa30 [ 355.027795][ T26] ? down_read_killable+0x1a9/0x480 [ 355.033043][ T26] ? ops_init+0x470/0x470 [ 355.037961][ T26] ? rcu_read_lock_sched_held+0x3a/0x70 [ 355.043864][ T26] copy_net_ns+0x319/0x760 [ 355.051742][ T26] create_new_namespaces+0x3f6/0xb20 [ 355.057791][ T26] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 355.063465][ T26] ksys_unshare+0x445/0x920 [ 355.068637][ T26] ? unshare_fd+0x1c0/0x1c0 [ 355.073188][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 355.080259][ T26] __x64_sys_unshare+0x2d/0x40 [ 355.085092][ T26] do_syscall_64+0x35/0xb0 [ 355.090010][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 355.096033][ T26] RIP: 0033:0x7f7891ef1a39 [ 355.100982][ T26] RSP: 002b:00007f788f467188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 355.109913][ T26] RAX: ffffffffffffffda RBX: 00007f7891ff4f60 RCX: 00007f7891ef1a39 [ 355.118389][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c060000 [ 355.126489][ T26] RBP: 00007f7891f4bc5f R08: 0000000000000000 R09: 0000000000000000 [ 355.134481][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.142872][ T26] R13: 00007ffe29d61cbf R14: 00007f788f467300 R15: 0000000000022000 [ 355.151247][ T26] INFO: task syz-executor.0:10947 blocked for more than 143 seconds. [ 355.162960][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 355.169204][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.178604][ T26] task:syz-executor.0 state:D stack:28304 pid:10947 ppid: 6578 flags:0x00004004 [ 355.187962][ T26] Call Trace: [ 355.191257][ T26] __schedule+0xb44/0x5960 [ 355.195700][ T26] ? find_held_lock+0x2d/0x110 [ 355.200694][ T26] ? __mutex_lock+0x9c2/0x12f0 [ 355.205522][ T26] ? io_schedule_timeout+0x140/0x140 [ 355.210934][ T26] schedule+0xd3/0x270 [ 355.215042][ T26] schedule_preempt_disabled+0xf/0x20 [ 355.220563][ T26] __mutex_lock+0xa34/0x12f0 [ 355.225186][ T26] ? smc_pnet_net_init+0x1f9/0x410 [ 355.230520][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 355.236092][ T26] ? smc_pnet_net_init+0x111/0x410 [ 355.241427][ T26] ? lockdep_init_map_type+0x2c3/0x7b0 [ 355.247021][ T26] smc_pnet_net_init+0x1f9/0x410 [ 355.251988][ T26] ? smc_net_exit+0x20/0x20 [ 355.256868][ T26] ops_init+0xaf/0x470 [ 355.260965][ T26] setup_net+0x40f/0xa30 [ 355.265231][ T26] ? down_read_killable+0x1a9/0x480 [ 355.273559][ T26] ? ops_init+0x470/0x470 [ 355.278104][ T26] ? rcu_read_lock_sched_held+0x3a/0x70 [ 355.284033][ T26] copy_net_ns+0x319/0x760 [ 355.288595][ T26] create_new_namespaces+0x3f6/0xb20 [ 355.293921][ T26] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 355.300442][ T26] ksys_unshare+0x445/0x920 [ 355.304991][ T26] ? unshare_fd+0x1c0/0x1c0 [ 355.309877][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 355.315801][ T26] __x64_sys_unshare+0x2d/0x40 [ 355.323272][ T26] do_syscall_64+0x35/0xb0 [ 355.328860][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 355.335060][ T26] RIP: 0033:0x7f7891ef1a39 [ 355.339648][ T26] RSP: 002b:00007f788f446188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 355.348346][ T26] RAX: ffffffffffffffda RBX: 00007f7891ff5020 RCX: 00007f7891ef1a39 [ 355.356347][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 355.364661][ T26] RBP: 00007f7891f4bc5f R08: 0000000000000000 R09: 0000000000000000 [ 355.372744][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.384329][ T26] R13: 00007ffe29d61cbf R14: 00007f788f446300 R15: 0000000000022000 [ 355.392473][ T26] INFO: task syz-executor.4:10946 blocked for more than 144 seconds. [ 355.400848][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 355.406852][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.415698][ T26] task:syz-executor.4 state:D stack:27568 pid:10946 ppid: 6602 flags:0x00004004 [ 355.425076][ T26] Call Trace: [ 355.428549][ T26] __schedule+0xb44/0x5960 [ 355.433011][ T26] ? find_held_lock+0x2d/0x110 [ 355.437931][ T26] ? __mutex_lock+0x9c2/0x12f0 [ 355.442902][ T26] ? io_schedule_timeout+0x140/0x140 [ 355.448329][ T26] schedule+0xd3/0x270 [ 355.452420][ T26] schedule_preempt_disabled+0xf/0x20 [ 355.458083][ T26] __mutex_lock+0xa34/0x12f0 [ 355.462710][ T26] ? register_nexthop_notifier+0x17/0x70 [ 355.468808][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 355.474372][ T26] ? vxlan_init_net+0xe0/0x390 [ 355.479709][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 355.484926][ T26] ? __raw_spin_lock_init+0x36/0x110 [ 355.493397][ T26] register_nexthop_notifier+0x17/0x70 [ 355.499144][ T26] ? vxlan_gro_receive+0x1170/0x1170 [ 355.505092][ T26] ops_init+0xaf/0x470 [ 355.509357][ T26] setup_net+0x40f/0xa30 [ 355.513631][ T26] ? down_read_killable+0x1a9/0x480 [ 355.519031][ T26] ? ops_init+0x470/0x470 [ 355.523422][ T26] ? rcu_read_lock_sched_held+0x3a/0x70 [ 355.529144][ T26] copy_net_ns+0x319/0x760 [ 355.533607][ T26] create_new_namespaces+0x3f6/0xb20 [ 355.539058][ T26] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 355.544716][ T26] ksys_unshare+0x445/0x920 [ 355.549346][ T26] ? unshare_fd+0x1c0/0x1c0 [ 355.553881][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 355.560083][ T26] __x64_sys_unshare+0x2d/0x40 [ 355.564879][ T26] do_syscall_64+0x35/0xb0 [ 355.569654][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 355.575572][ T26] RIP: 0033:0x7fcbfb06da39 [ 355.580197][ T26] RSP: 002b:00007fcbf85e3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 355.589328][ T26] RAX: ffffffffffffffda RBX: 00007fcbfb170f60 RCX: 00007fcbfb06da39 [ 355.600399][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000000 [ 355.608498][ T26] RBP: 00007fcbfb0c7c5f R08: 0000000000000000 R09: 0000000000000000 [ 355.616854][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.625024][ T26] R13: 00007ffd759e1a8f R14: 00007fcbf85e3300 R15: 0000000000022000 [ 355.633463][ T26] INFO: task syz-executor.5:10967 blocked for more than 144 seconds. [ 355.641917][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 355.647913][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.656929][ T26] task:syz-executor.5 state:D stack:27496 pid:10967 ppid: 8311 flags:0x00004004 [ 355.666165][ T26] Call Trace: [ 355.669733][ T26] __schedule+0xb44/0x5960 [ 355.674180][ T26] ? find_held_lock+0x2d/0x110 [ 355.679136][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 355.683930][ T26] ? io_schedule_timeout+0x140/0x140 [ 355.689799][ T26] schedule+0xd3/0x270 [ 355.693914][ T26] schedule_preempt_disabled+0xf/0x20 [ 355.699523][ T26] __mutex_lock+0xa34/0x12f0 [ 355.704141][ T26] ? smc_pnet_net_init+0x1f9/0x410 [ 355.712314][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 355.718308][ T26] ? smc_pnet_net_init+0x111/0x410 [ 355.723546][ T26] ? lockdep_init_map_type+0x2c3/0x7b0 [ 355.729121][ T26] smc_pnet_net_init+0x1f9/0x410 [ 355.734169][ T26] ? smc_net_exit+0x20/0x20 [ 355.738873][ T26] ops_init+0xaf/0x470 [ 355.742967][ T26] setup_net+0x40f/0xa30 [ 355.747323][ T26] ? down_read_killable+0x1a9/0x480 [ 355.752553][ T26] ? ops_init+0x470/0x470 [ 355.757069][ T26] ? rcu_read_lock_sched_held+0x3a/0x70 [ 355.762844][ T26] copy_net_ns+0x319/0x760 [ 355.767351][ T26] create_new_namespaces+0x3f6/0xb20 [ 355.772656][ T26] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 355.778653][ T26] ksys_unshare+0x445/0x920 [ 355.783176][ T26] ? unshare_fd+0x1c0/0x1c0 [ 355.787865][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 355.794126][ T26] __x64_sys_unshare+0x2d/0x40 [ 355.799315][ T26] do_syscall_64+0x35/0xb0 [ 355.803763][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 355.809777][ T26] RIP: 0033:0x7fb75ab25a39 [ 355.814205][ T26] RSP: 002b:00007fb75809b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 355.825614][ T26] RAX: ffffffffffffffda RBX: 00007fb75ac28f60 RCX: 00007fb75ab25a39 [ 355.833745][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c060000 [ 355.841904][ T26] RBP: 00007fb75ab7fc5f R08: 0000000000000000 R09: 0000000000000000 [ 355.849984][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.858129][ T26] R13: 00007ffc9a715dbf R14: 00007fb75809b300 R15: 0000000000022000 [ 355.866216][ T26] INFO: task syz-executor.5:10970 blocked for more than 144 seconds. [ 355.874398][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 355.880589][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.889351][ T26] task:syz-executor.5 state:D stack:28224 pid:10970 ppid: 8311 flags:0x00004004 [ 355.899672][ T26] Call Trace: [ 355.902988][ T26] __schedule+0xb44/0x5960 [ 355.907523][ T26] ? find_held_lock+0x2d/0x110 [ 355.912304][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 355.917301][ T26] ? io_schedule_timeout+0x140/0x140 [ 355.922629][ T26] schedule+0xd3/0x270 [ 355.928793][ T26] schedule_preempt_disabled+0xf/0x20 [ 355.934222][ T26] __mutex_lock+0xa34/0x12f0 [ 355.943795][ T26] ? smc_pnet_net_init+0x1f9/0x410 [ 355.950315][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 355.955890][ T26] ? smc_pnet_net_init+0x111/0x410 [ 355.966623][ T26] ? lockdep_init_map_type+0x2c3/0x7b0 [ 355.972157][ T26] smc_pnet_net_init+0x1f9/0x410 [ 355.977329][ T26] ? smc_net_exit+0x20/0x20 [ 355.981860][ T26] ops_init+0xaf/0x470 [ 355.985952][ T26] setup_net+0x40f/0xa30 [ 355.990544][ T26] ? down_read_killable+0x1a9/0x480 [ 355.996320][ T26] ? ops_init+0x470/0x470 [ 356.001592][ T26] ? rcu_read_lock_sched_held+0x3a/0x70 [ 356.007608][ T26] copy_net_ns+0x319/0x760 [ 356.012083][ T26] create_new_namespaces+0x3f6/0xb20 [ 356.018134][ T26] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 356.023814][ T26] ksys_unshare+0x445/0x920 [ 356.028793][ T26] ? unshare_fd+0x1c0/0x1c0 [ 356.033377][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 356.040016][ T26] __x64_sys_unshare+0x2d/0x40 [ 356.044852][ T26] do_syscall_64+0x35/0xb0 [ 356.049747][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 356.055691][ T26] RIP: 0033:0x7fb75ab25a39 [ 356.061514][ T26] RSP: 002b:00007fb75807a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 356.070707][ T26] RAX: ffffffffffffffda RBX: 00007fb75ac29020 RCX: 00007fb75ab25a39 [ 356.079197][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 356.088171][ T26] RBP: 00007fb75ab7fc5f R08: 0000000000000000 R09: 0000000000000000 [ 356.096988][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.105472][ T26] R13: 00007ffc9a715dbf R14: 00007fb75807a300 R15: 0000000000022000 [ 356.114103][ T26] INFO: task syz-executor.5:10973 blocked for more than 144 seconds. [ 356.124111][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 356.131213][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.141448][ T26] task:syz-executor.5 state:D stack:28272 pid:10973 ppid: 8311 flags:0x00000004 [ 356.152384][ T26] Call Trace: [ 356.155711][ T26] __schedule+0xb44/0x5960 [ 356.160290][ T26] ? find_held_lock+0x2d/0x110 [ 356.165184][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 356.170115][ T26] ? io_schedule_timeout+0x140/0x140 [ 356.175453][ T26] schedule+0xd3/0x270 [ 356.179736][ T26] schedule_preempt_disabled+0xf/0x20 [ 356.185431][ T26] __mutex_lock+0xa34/0x12f0 [ 356.190130][ T26] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 356.195341][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 356.201662][ T26] ? rtnetlink_rcv_msg+0x388/0xb80 [ 356.206978][ T26] rtnetlink_rcv_msg+0x3be/0xb80 [ 356.211966][ T26] ? rtnl_newlink+0xa0/0xa0 [ 356.216601][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 356.221912][ T26] netlink_rcv_skb+0x153/0x420 [ 356.226899][ T26] ? rtnl_newlink+0xa0/0xa0 [ 356.231457][ T26] ? netlink_ack+0xa60/0xa60 [ 356.236063][ T26] ? netlink_deliver_tap+0x1a2/0xc30 [ 356.241806][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 356.247806][ T26] netlink_unicast+0x533/0x7d0 [ 356.252616][ T26] ? netlink_attachskb+0x880/0x880 [ 356.258195][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 356.264556][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 356.271546][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 356.277382][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 356.283297][ T26] ? __check_object_size+0x16e/0x3f0 [ 356.289189][ T26] netlink_sendmsg+0x86d/0xda0 [ 356.294000][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 356.299547][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 356.306299][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 356.312338][ T26] sock_sendmsg+0xcf/0x120 [ 356.317265][ T26] ____sys_sendmsg+0x6e8/0x810 [ 356.322084][ T26] ? kernel_sendmsg+0x50/0x50 [ 356.327428][ T26] ? do_recvmmsg+0x6d0/0x6d0 [ 356.332057][ T26] ? lock_chain_count+0x20/0x20 [ 356.337332][ T26] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 356.343558][ T26] ___sys_sendmsg+0xf3/0x170 [ 356.348776][ T26] ? sendmsg_copy_msghdr+0x160/0x160 [ 356.354115][ T26] ? __fget_files+0x21b/0x3e0 [ 356.359583][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 356.364509][ T26] ? __fget_files+0x23d/0x3e0 [ 356.376668][ T26] ? __fget_light+0xea/0x280 [ 356.381312][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 356.392746][ T26] __sys_sendmsg+0xe5/0x1b0 [ 356.397732][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 356.402822][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 356.410250][ T26] do_syscall_64+0x35/0xb0 [ 356.414714][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 356.421587][ T26] RIP: 0033:0x7fb75ab25a39 [ 356.426288][ T26] RSP: 002b:00007fb758059188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.434906][ T26] RAX: ffffffffffffffda RBX: 00007fb75ac290e0 RCX: 00007fb75ab25a39 [ 356.443251][ T26] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 356.451339][ T26] RBP: 00007fb75ab7fc5f R08: 0000000000000000 R09: 0000000000000000 [ 356.459508][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.471826][ T26] R13: 00007ffc9a715dbf R14: 00007fb758059300 R15: 0000000000022000 [ 356.480226][ T26] INFO: task syz-executor.2:10974 blocked for more than 145 seconds. [ 356.488986][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 356.494907][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.507405][ T26] task:syz-executor.2 state:D stack:28248 pid:10974 ppid: 8048 flags:0x00004004 [ 356.518130][ T26] Call Trace: [ 356.521430][ T26] __schedule+0xb44/0x5960 [ 356.525883][ T26] ? find_held_lock+0x2d/0x110 [ 356.530808][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 356.537457][ T26] ? io_schedule_timeout+0x140/0x140 [ 356.543388][ T26] schedule+0xd3/0x270 [ 356.547586][ T26] schedule_preempt_disabled+0xf/0x20 [ 356.552979][ T26] __mutex_lock+0xa34/0x12f0 [ 356.557790][ T26] ? smc_pnet_net_init+0x1f9/0x410 [ 356.562953][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 356.568744][ T26] ? smc_pnet_net_init+0x111/0x410 [ 356.573897][ T26] ? lockdep_init_map_type+0x2c3/0x7b0 [ 356.579717][ T26] smc_pnet_net_init+0x1f9/0x410 [ 356.584713][ T26] ? smc_net_exit+0x20/0x20 [ 356.589350][ T26] ops_init+0xaf/0x470 [ 356.593448][ T26] setup_net+0x40f/0xa30 [ 356.598155][ T26] ? down_read_killable+0x1a9/0x480 [ 356.603420][ T26] ? ops_init+0x470/0x470 [ 356.610902][ T26] ? rcu_read_lock_sched_held+0x3a/0x70 [ 356.617522][ T26] copy_net_ns+0x319/0x760 [ 356.622037][ T26] create_new_namespaces+0x3f6/0xb20 [ 356.627554][ T26] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 356.633240][ T26] ksys_unshare+0x445/0x920 [ 356.637968][ T26] ? unshare_fd+0x1c0/0x1c0 [ 356.642521][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 356.648545][ T26] __x64_sys_unshare+0x2d/0x40 [ 356.653323][ T26] do_syscall_64+0x35/0xb0 [ 356.657968][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 356.664028][ T26] RIP: 0033:0x7f82ed00ca39 [ 356.668587][ T26] RSP: 002b:00007f82ea582188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 356.677441][ T26] RAX: ffffffffffffffda RBX: 00007f82ed10ff60 RCX: 00007f82ed00ca39 [ 356.685445][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c060000 [ 356.693515][ T26] RBP: 00007f82ed066c5f R08: 0000000000000000 R09: 0000000000000000 [ 356.701684][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.709843][ T26] R13: 00007ffe0a869bbf R14: 00007f82ea582300 R15: 0000000000022000 [ 356.720974][ T26] INFO: task syz-executor.2:10977 blocked for more than 145 seconds. [ 356.730075][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 356.736037][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.745021][ T26] task:syz-executor.2 state:D stack:28032 pid:10977 ppid: 8048 flags:0x00004004 [ 356.754364][ T26] Call Trace: [ 356.757893][ T26] __schedule+0xb44/0x5960 [ 356.762561][ T26] ? find_held_lock+0x2d/0x110 [ 356.767609][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 356.772672][ T26] ? io_schedule_timeout+0x140/0x140 [ 356.778379][ T26] schedule+0xd3/0x270 [ 356.782668][ T26] schedule_preempt_disabled+0xf/0x20 [ 356.788242][ T26] __mutex_lock+0xa34/0x12f0 [ 356.792858][ T26] ? smc_pnet_net_init+0x1f9/0x410 [ 356.798114][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 356.803689][ T26] ? smc_pnet_net_init+0x111/0x410 [ 356.808927][ T26] ? lockdep_init_map_type+0x2c3/0x7b0 [ 356.814407][ T26] smc_pnet_net_init+0x1f9/0x410 [ 356.820002][ T26] ? smc_net_exit+0x20/0x20 [ 356.824585][ T26] ops_init+0xaf/0x470 [ 356.831105][ T26] setup_net+0x40f/0xa30 [ 356.835389][ T26] ? down_read_killable+0x1a9/0x480 [ 356.841454][ T26] ? ops_init+0x470/0x470 [ 356.845824][ T26] ? rcu_read_lock_sched_held+0x3a/0x70 [ 356.851546][ T26] copy_net_ns+0x319/0x760 [ 356.856018][ T26] create_new_namespaces+0x3f6/0xb20 [ 356.861421][ T26] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 356.867216][ T26] ksys_unshare+0x445/0x920 [ 356.871758][ T26] ? unshare_fd+0x1c0/0x1c0 [ 356.876266][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 356.882345][ T26] __x64_sys_unshare+0x2d/0x40 [ 356.887337][ T26] do_syscall_64+0x35/0xb0 [ 356.891783][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 356.897776][ T26] RIP: 0033:0x7f82ed00ca39 [ 356.902204][ T26] RSP: 002b:00007f82ea561188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 356.910782][ T26] RAX: ffffffffffffffda RBX: 00007f82ed110020 RCX: 00007f82ed00ca39 [ 356.919839][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 356.928082][ T26] RBP: 00007f82ed066c5f R08: 0000000000000000 R09: 0000000000000000 [ 356.936361][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.944360][ T26] R13: 00007ffe0a869bbf R14: 00007f82ea561300 R15: 0000000000022000 [ 356.955480][ T26] INFO: task syz-executor.2:10980 blocked for more than 145 seconds. [ 356.963816][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 356.969914][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 356.979384][ T26] task:syz-executor.2 state:D stack:28272 pid:10980 ppid: 8048 flags:0x00000004 [ 356.989321][ T26] Call Trace: [ 356.992625][ T26] __schedule+0xb44/0x5960 [ 356.998201][ T26] ? find_held_lock+0x2d/0x110 [ 357.003039][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 357.008914][ T26] ? io_schedule_timeout+0x140/0x140 [ 357.014277][ T26] schedule+0xd3/0x270 [ 357.019985][ T26] schedule_preempt_disabled+0xf/0x20 [ 357.025441][ T26] __mutex_lock+0xa34/0x12f0 [ 357.030506][ T26] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 357.035747][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 357.042174][ T26] ? rtnetlink_rcv_msg+0x388/0xb80 [ 357.048263][ T26] rtnetlink_rcv_msg+0x3be/0xb80 [ 357.053389][ T26] ? rtnl_newlink+0xa0/0xa0 [ 357.060806][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 357.068236][ T26] netlink_rcv_skb+0x153/0x420 [ 357.073070][ T26] ? rtnl_newlink+0xa0/0xa0 [ 357.079080][ T26] ? netlink_ack+0xa60/0xa60 [ 357.083803][ T26] ? netlink_deliver_tap+0x1a2/0xc30 [ 357.090380][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 357.095722][ T26] netlink_unicast+0x533/0x7d0 [ 357.101101][ T26] ? netlink_attachskb+0x880/0x880 [ 357.106256][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 357.113360][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 357.120424][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 357.126016][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 357.133844][ T26] ? __check_object_size+0x16e/0x3f0 [ 357.139773][ T26] netlink_sendmsg+0x86d/0xda0 [ 357.144596][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 357.149952][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 357.156231][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 357.161937][ T26] sock_sendmsg+0xcf/0x120 [ 357.166921][ T26] ____sys_sendmsg+0x6e8/0x810 [ 357.171768][ T26] ? kernel_sendmsg+0x50/0x50 [ 357.176593][ T26] ? do_recvmmsg+0x6d0/0x6d0 [ 357.181481][ T26] ? lock_chain_count+0x20/0x20 [ 357.186833][ T26] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 357.193056][ T26] ___sys_sendmsg+0xf3/0x170 [ 357.199245][ T26] ? sendmsg_copy_msghdr+0x160/0x160 [ 357.204663][ T26] ? __fget_files+0x21b/0x3e0 [ 357.209596][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 357.214487][ T26] ? __fget_files+0x23d/0x3e0 [ 357.220429][ T26] ? __fget_light+0xea/0x280 [ 357.225574][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 357.233181][ T26] __sys_sendmsg+0xe5/0x1b0 [ 357.239836][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 357.244942][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 357.251092][ T26] do_syscall_64+0x35/0xb0 [ 357.255553][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 357.262627][ T26] RIP: 0033:0x7f82ed00ca39 [ 357.268484][ T26] RSP: 002b:00007f82ea540188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.278359][ T26] RAX: ffffffffffffffda RBX: 00007f82ed1100e0 RCX: 00007f82ed00ca39 [ 357.290419][ T26] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 357.299447][ T26] RBP: 00007f82ed066c5f R08: 0000000000000000 R09: 0000000000000000 [ 357.309008][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.318176][ T26] R13: 00007ffe0a869bbf R14: 00007f82ea540300 R15: 0000000000022000 [ 357.332078][ T26] [ 357.332078][ T26] Showing all locks held in the system: [ 357.341431][ T26] 1 lock held by khungtaskd/26: [ 357.347156][ T26] #0: ffffffff8b981ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 357.357788][ T26] 2 locks held by kworker/u4:2/149: [ 357.363180][ T26] #0: ffff8880b9d31a58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 [ 357.373718][ T26] #1: ffff8880b9d1f9c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x16a/0x480 [ 357.386178][ T26] 1 lock held by in:imklog/6250: [ 357.392192][ T26] #0: ffff888073f234f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 357.410474][ T26] 4 locks held by kworker/u4:13/9182: [ 357.415883][ T26] #0: ffff888143f83138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 357.428736][ T26] #1: ffffc9000c457db0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 357.440298][ T26] #2: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xb00 [ 357.450774][ T26] #3: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: fib6_rules_net_exit+0xe/0x50 [ 357.461174][ T26] 3 locks held by kworker/1:14/9510: [ 357.467416][ T26] #0: ffff888010c65d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 357.480189][ T26] #1: ffffc900043a7db0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 357.491649][ T26] #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x83/0xe10 [ 357.502175][ T26] 3 locks held by kworker/1:17/9516: [ 357.511241][ T26] #0: ffff8880254aa938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 357.523169][ T26] #1: ffffc90004407db0 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 357.535158][ T26] #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 357.545651][ T26] 2 locks held by syz-executor.0/10943: [ 357.551487][ T26] #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 357.561461][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x2d5/0x9d0 [ 357.572674][ T26] 2 locks held by syz-executor.0/10947: [ 357.578441][ T26] #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 357.588220][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x1f9/0x410 [ 357.603150][ T26] 1 lock held by syz-executor.0/10958: [ 357.609538][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 357.622962][ T26] 2 locks held by syz-executor.4/10946: [ 357.629432][ T26] #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 357.640657][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x17/0x70 [ 357.650852][ T26] 2 locks held by syz-executor.5/10967: [ 357.656788][ T26] #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 357.666467][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x1f9/0x410 [ 357.675911][ T26] 2 locks held by syz-executor.5/10970: [ 357.682985][ T26] #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 357.693426][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x1f9/0x410 [ 357.704411][ T26] 1 lock held by syz-executor.5/10973: [ 357.710597][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 357.721785][ T26] 2 locks held by syz-executor.2/10974: [ 357.728921][ T26] #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 357.739125][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x1f9/0x410 [ 357.749016][ T26] 2 locks held by syz-executor.2/10977: [ 357.754579][ T26] #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 357.764299][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x1f9/0x410 [ 357.773920][ T26] 1 lock held by syz-executor.2/10980: [ 357.779506][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 357.790502][ T26] [ 357.792928][ T26] ============================================= [ 357.792928][ T26] [ 357.801577][ T26] NMI backtrace for cpu 1 [ 357.805911][ T26] CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 357.814080][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.824138][ T26] Call Trace: [ 357.827431][ T26] dump_stack_lvl+0xcd/0x134 [ 357.832117][ T26] nmi_cpu_backtrace.cold+0x47/0x144 [ 357.837433][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 357.842681][ T26] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 357.848725][ T26] watchdog+0xc1d/0xf50 [ 357.852942][ T26] ? reset_hung_task_detector+0x30/0x30 [ 357.858500][ T26] kthread+0x3e5/0x4d0 [ 357.862569][ T26] ? set_kthread_struct+0x130/0x130 [ 357.867770][ T26] ret_from_fork+0x1f/0x30 [ 357.872826][ T26] Sending NMI from CPU 1 to CPUs 0: [ 357.878232][ C0] NMI backtrace for cpu 0 [ 357.878244][ C0] CPU: 0 PID: 149 Comm: kworker/u4:2 Not tainted 5.15.0-rc5-syzkaller #0 [ 357.878265][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 357.878277][ C0] Workqueue: bat_events batadv_nc_worker [ 357.878370][ C0] RIP: 0010:__lock_acquire+0x994/0x54a0 [ 357.878395][ C0] Code: 48 00 00 41 8b 85 18 0a 00 00 85 c0 74 77 48 8b 5c 24 28 48 8d 04 80 48 8d 5c c3 d8 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 21 <48> 89 fa 48 c1 ea 03 0f b6 04 02 48 89 fa 83 e2 07 38 d0 7f 08 84 [ 357.878413][ C0] RSP: 0018:ffffc900014cfa60 EFLAGS: 00000002 [ 357.878428][ C0] RAX: dffffc0000000000 RBX: ffff88801781a6c8 RCX: ffffffff815be70a [ 357.878442][ C0] RDX: 1ffff11002f034d3 RSI: 0000000000000008 RDI: ffff88801781a6e9 [ 357.878454][ C0] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffff8fd0c9e7 [ 357.878466][ C0] R10: fffffbfff1fa193c R11: 0000000000000000 R12: ffff88801781a6f0 [ 357.878478][ C0] R13: ffff888017819c80 R14: 0000000000000000 R15: 3a8ff2597f922626 [ 357.878492][ C0] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 357.878510][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.878523][ C0] CR2: 00007f425e4b6360 CR3: 000000000b68e000 CR4: 00000000003506f0 [ 357.878536][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.878548][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.878560][ C0] Call Trace: [ 357.878572][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 357.878598][ C0] lock_acquire+0x1ab/0x510 [ 357.878617][ C0] ? batadv_nc_worker+0xf3/0xfa0 [ 357.878638][ C0] ? lock_release+0x720/0x720 [ 357.878657][ C0] ? batadv_nc_worker+0x849/0xfa0 [ 357.878677][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 357.878701][ C0] batadv_nc_worker+0x12d/0xfa0 [ 357.878721][ C0] ? batadv_nc_worker+0xf3/0xfa0 [ 357.878745][ C0] process_one_work+0x9bf/0x16b0 [ 357.878767][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 357.878787][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 357.878807][ C0] ? _raw_spin_lock_irq+0x41/0x50 [ 357.878834][ C0] worker_thread+0x658/0x11f0 [ 357.878856][ C0] ? process_one_work+0x16b0/0x16b0 [ 357.878875][ C0] kthread+0x3e5/0x4d0 [ 357.878894][ C0] ? set_kthread_struct+0x130/0x130 [ 357.878917][ C0] ret_from_fork+0x1f/0x30 [ 357.903550][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 358.119252][ T26] CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 358.127411][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.137457][ T26] Call Trace: [ 358.140745][ T26] dump_stack_lvl+0xcd/0x134 [ 358.145342][ T26] panic+0x2b0/0x6dd [ 358.149282][ T26] ? __warn_printk+0xf3/0xf3 [ 358.153892][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 358.159090][ T26] ? preempt_schedule_thunk+0x16/0x18 [ 358.164463][ T26] ? nmi_trigger_cpumask_backtrace+0x191/0x220 [ 358.170615][ T26] ? watchdog.cold+0x130/0x158 [ 358.175416][ T26] watchdog.cold+0x141/0x158 [ 358.180010][ T26] ? reset_hung_task_detector+0x30/0x30 [ 358.185569][ T26] kthread+0x3e5/0x4d0 [ 358.189637][ T26] ? set_kthread_struct+0x130/0x130 [ 358.194924][ T26] ret_from_fork+0x1f/0x30 [ 358.199817][ T26] Kernel Offset: disabled [ 358.204312][ T26] Rebooting in 86400 seconds..