87f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r6}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r7 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r7, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:07 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa8050000}, [{}]}, 0xfdef) 23:01:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xadf, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3de, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 374.089550][T17691] tun1: tun_chr_ioctl cmd 1074025677 [ 374.095005][T17691] tun1: linktype set to 10 23:01:07 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xaf2c0000}, [{}]}, 0xfdef) 23:01:07 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x64) 23:01:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 374.195412][T17705] tun1: tun_chr_ioctl cmd 1074025677 [ 374.210372][T17705] tun1: linktype set to 100 [ 374.314707][T17710] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 374.360830][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 374.405998][T17703] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:08 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3e2, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:08 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xafe10000}, [{}]}, 0xfdef) 23:01:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 23:01:08 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r2, 0x40049409, r1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r6}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r7 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r7, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:08 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb71b0000}, [{}]}, 0xfdef) 23:01:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc02, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3ea, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:08 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb7d00000}, [{}]}, 0xfdef) [ 374.630282][T17721] tun1: tun_chr_ioctl cmd 1074025677 [ 374.636137][T17721] tun1: linktype set to 270 23:01:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3ee, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 374.834114][T17732] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 374.867589][T17732] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 374.902889][T17732] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:08 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:08 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb80b0000}, [{}]}, 0xfdef) 23:01:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) 23:01:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3f2, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:08 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r2, 0x40049409, r1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r6}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r7 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r7, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:08 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xbf0a0000}, [{}]}, 0xfdef) 23:01:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3fa, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:08 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xbfbf0000}, [{}]}, 0xfdef) [ 375.042537][T17746] tun1: tun_chr_ioctl cmd 1074025677 [ 375.052058][T17746] tun1: linktype set to 280 23:01:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1100, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:08 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc7ae0000}, [{}]}, 0xfdef) [ 375.228173][T17767] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 375.263728][T17759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 375.288266][T17759] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:09 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3fc, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x202) 23:01:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1200, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:09 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xcf9d0000}, [{}]}, 0xfdef) 23:01:09 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:09 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd78c0000}, [{}]}, 0xfdef) 23:01:09 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xdc050000}, [{}]}, 0xfdef) 23:01:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x402, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1c03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 375.619060][T17780] tun1: tun_chr_ioctl cmd 1074025677 [ 375.635443][T17780] tun1: linktype set to 514 23:01:09 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xdf7b0000}, [{}]}, 0xfdef) 23:01:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x203) [ 375.815771][T17796] tun1: tun_chr_ioctl cmd 1074025677 [ 375.829606][T17796] tun1: linktype set to 515 [ 375.848457][T17797] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 375.899775][T17791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 375.934423][T17791] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:09 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:09 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe76a0000}, [{}]}, 0xfdef) 23:01:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x204) 23:01:09 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:09 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xef590000}, [{}]}, 0xfdef) 23:01:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2400, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x600, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:09 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf7480000}, [{}]}, 0xfdef) [ 376.086520][T17806] tun1: tun_chr_ioctl cmd 1074025677 [ 376.092134][T17806] tun1: linktype set to 516 23:01:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2500, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:09 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xff370000}, [{}]}, 0xfdef) [ 376.369027][T17819] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 376.417532][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 376.436086][T17825] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:10 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:10 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffec0000}, [{}]}, 0xfdef) 23:01:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x205) 23:01:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2808, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:10 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, 0x0}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:10 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffff8d}, [{}]}, 0xfdef) 23:01:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x84c, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:10 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffff97}, [{}]}, 0xfdef) 23:01:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2a00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:10 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x100000000000000}, [{}]}, 0xfdef) 23:01:10 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x200000000000000}, [{}]}, 0xfdef) [ 376.642781][T17835] tun1: tun_chr_ioctl cmd 1074025677 [ 376.655806][T17835] tun1: linktype set to 517 [ 376.797485][T17850] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 376.828396][T17850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 376.848619][T17850] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:10 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:10 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x300000000000000}, [{}]}, 0xfdef) 23:01:10 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20a) 23:01:10 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:10 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x400000000000000}, [{}]}, 0xfdef) 23:01:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:10 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x500000000000000}, [{}]}, 0xfdef) 23:01:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3802, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xab8, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:10 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x600000000000000}, [{}]}, 0xfdef) [ 377.068899][T17863] tun1: tun_chr_ioctl cmd 1074025677 [ 377.091346][T17863] tun1: linktype set to 522 [ 377.326320][T17878] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 377.343088][T17878] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 377.380542][T17878] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:11 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x210) 23:01:11 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x700000000000000}, [{}]}, 0xfdef) 23:01:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xade, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:11 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:11 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x727000000000000}, [{}]}, 0xfdef) 23:01:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xadf, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3f00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 377.624750][T17891] tun1: tun_chr_ioctl cmd 1074025677 23:01:11 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7dc000000000000}, [{}]}, 0xfdef) [ 377.646900][T17891] tun1: linktype set to 528 23:01:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:11 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x800000000000000}, [{}]}, 0xfdef) [ 377.841495][T17904] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 377.866020][T17904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 377.875431][T17904] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:11 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:11 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf16000000000000}, [{}]}, 0xfdef) 23:01:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x264) 23:01:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:11 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:11 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfcb000000000000}, [{}]}, 0xfdef) 23:01:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc02, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4601, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 378.144103][T17920] tun1: tun_chr_ioctl cmd 1074025677 23:01:11 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1100000000000000}, [{}]}, 0xfdef) [ 378.166121][T17920] tun1: linktype set to 612 23:01:11 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) 23:01:11 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1705000000000000}, [{}]}, 0xfdef) [ 378.239688][T17935] tun1: tun_chr_ioctl cmd 1074025677 [ 378.256485][T17935] tun1: linktype set to 768 [ 378.357285][T17936] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 378.402811][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 378.435605][T17936] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:12 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4788, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:12 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ba000000000000}, [{}]}, 0xfdef) 23:01:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) 23:01:12 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:12 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1fa9000000000000}, [{}]}, 0xfdef) 23:01:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4800, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:12 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2798000000000000}, [{}]}, 0xfdef) [ 378.638935][T17951] tun1: tun_chr_ioctl cmd 1074025677 [ 378.644392][T17951] tun1: linktype set to 769 23:01:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) [ 378.735023][T17965] tun1: tun_chr_ioctl cmd 1074025677 [ 378.750477][T17965] tun1: linktype set to 773 [ 378.875661][T17968] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 378.926645][T17966] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 378.955082][T17966] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:12 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4888, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:12 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2f87000000000000}, [{}]}, 0xfdef) 23:01:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1100, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:12 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 23:01:12 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:12 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3776000000000000}, [{}]}, 0xfdef) 23:01:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4a00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:12 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3f65000000000000}, [{}]}, 0xfdef) 23:01:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1200, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 379.301932][T17978] tun1: tun_chr_ioctl cmd 1074025677 [ 379.316233][T17978] tun1: linktype set to 774 23:01:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4c00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:12 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4000000000000000}, [{}]}, 0xfdef) [ 379.507493][T17997] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 379.544432][T17998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 379.557262][T17998] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:13 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 23:01:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1803, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4e00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:13 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4754000000000000}, [{}]}, 0xfdef) 23:01:13 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:13 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f43000000000000}, [{}]}, 0xfdef) 23:01:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5401, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1a00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:13 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4ff8000000000000}, [{}]}, 0xfdef) [ 379.767762][T18011] tun1: tun_chr_ioctl cmd 1074025677 [ 379.775135][T18011] tun1: linktype set to 776 23:01:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5802, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:13 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5732000000000000}, [{}]}, 0xfdef) [ 380.009940][T18027] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 380.023173][T18027] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 380.037325][T18027] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:13 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 23:01:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1c03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5865, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:13 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x57e7000000000000}, [{}]}, 0xfdef) 23:01:13 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:13 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5f21000000000000}, [{}]}, 0xfdef) 23:01:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5a03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 380.169246][T18035] tun1: tun_chr_ioctl cmd 1074025677 [ 380.174716][T18035] tun1: linktype set to 778 23:01:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 23:01:13 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5fd6000000000000}, [{}]}, 0xfdef) 23:01:13 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6000000000000000}, [{}]}, 0xfdef) [ 380.298654][T18051] tun1: tun_chr_ioctl cmd 1074025677 [ 380.304235][T18051] tun1: linktype set to 780 [ 380.392571][T18055] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 380.427386][T18055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 380.474932][T18055] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:14 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2400, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5c02, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:14 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6710000000000000}, [{}]}, 0xfdef) 23:01:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) 23:01:14 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:14 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x67c5000000000000}, [{}]}, 0xfdef) 23:01:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2500, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5c03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 380.661539][T18065] tun1: tun_chr_ioctl cmd 1074025677 [ 380.670639][T18065] tun1: linktype set to 804 23:01:14 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6fb4000000000000}, [{}]}, 0xfdef) 23:01:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) 23:01:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2f00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 380.793401][T18079] tun1: tun_chr_ioctl cmd 1074025677 [ 380.816521][T18079] tun1: linktype set to 805 [ 380.864788][T18083] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 380.887408][T18083] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 380.940572][T18083] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:14 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:14 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x77a3000000000000}, [{}]}, 0xfdef) 23:01:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3201, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x335) 23:01:14 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:14 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7f92000000000000}, [{}]}, 0xfdef) [ 381.081838][T18092] tun1: tun_chr_ioctl cmd 1074025677 23:01:14 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8700000000000000}, [{}]}, 0xfdef) 23:01:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6202, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 381.105583][T18092] tun1: linktype set to 821 23:01:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3802, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:14 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8781000000000000}, [{}]}, 0xfdef) 23:01:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6400, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 381.322387][T18111] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 381.331212][T18111] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 381.400451][T18111] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:14 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:14 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) 23:01:14 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8dffffff00000000}, [{}]}, 0xfdef) 23:01:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6558, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:14 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81b"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6800, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:14 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8f70000000000000}, [{}]}, 0xfdef) 23:01:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3f00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:14 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x975f000000000000}, [{}]}, 0xfdef) 23:01:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6a03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 381.521683][T18121] tun1: tun_chr_ioctl cmd 1074025677 [ 381.535835][T18121] tun1: linktype set to 822 23:01:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) [ 381.667591][T18138] tun1: tun_chr_ioctl cmd 1074025677 [ 381.682305][T18138] tun1: linktype set to 823 [ 381.701317][T18129] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 381.722153][T18129] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 381.816107][T18129] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:15 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:15 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x97ffffff00000000}, [{}]}, 0xfdef) 23:01:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6c00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) 23:01:15 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81b"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:15 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9f4e000000000000}, [{}]}, 0xfdef) 23:01:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7400, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4788, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:15 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa73d000000000000}, [{}]}, 0xfdef) [ 381.934755][T18151] tun1: tun_chr_ioctl cmd 1074025677 [ 381.948915][T18151] tun1: linktype set to 825 23:01:15 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa7f2000000000000}, [{}]}, 0xfdef) 23:01:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7a00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 382.151993][T18167] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 382.165023][T18167] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4800, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:15 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xa805000000000000}, [{}]}, 0xfdef) 23:01:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x5f5e0ff) 23:01:15 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:15 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81b"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:15 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xaf2c000000000000}, [{}]}, 0xfdef) 23:01:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8847, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4888, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 382.431437][T18177] tun1: tun_chr_ioctl cmd 1074025677 [ 382.449286][T18177] tun1: linktype set to 57599 23:01:15 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xafe1000000000000}, [{}]}, 0xfdef) 23:01:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8848, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4a00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:15 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb71b000000000000}, [{}]}, 0xfdef) 23:01:15 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0xfffffffe) 23:01:15 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb7d0000000000000}, [{}]}, 0xfdef) 23:01:16 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb80b000000000000}, [{}]}, 0xfdef) [ 382.620778][T18198] tun1: tun_chr_ioctl cmd 1074025677 [ 382.640268][T18198] tun1: linktype set to 65534 [ 382.714491][T18205] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 382.758551][T18191] __nla_validate_parse: 1 callbacks suppressed [ 382.758563][T18191] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 382.790194][T18191] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:16 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4a01, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8a01, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:16 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xbf0a000000000000}, [{}]}, 0xfdef) 23:01:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) 23:01:16 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:16 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xbfbf000000000000}, [{}]}, 0xfdef) 23:01:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) 23:01:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4c00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8e02, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:16 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc7ae000000000000}, [{}]}, 0xfdef) 23:01:16 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xcf9d000000000000}, [{}]}, 0xfdef) [ 383.190482][T18232] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 383.227027][T18232] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 383.256127][T18232] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:16 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) 23:01:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4c08, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8e03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:16 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xd78c000000000000}, [{}]}, 0xfdef) 23:01:16 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xbb}}, './file0\x00'}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xc, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x0, 0x5, 0x5, 0xa, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @call={0x85, 0x0, 0x0, 0xd}, @ldst={0x1, 0x1, 0x3, 0x7, 0x3, 0x80, 0x10}, @jmp={0x5, 0x0, 0x5, 0xb, 0xb, 0x100}, @jmp={0x5, 0x1, 0x2, 0xb, 0x1, 0x10, 0xfffffffffffffff1}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x4, &(0x7f0000000140)=""/4, 0x40f00, 0x1, '\x00', 0x0, 0xd, r1, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x3, 0x1, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r2]}, 0x80) 23:01:16 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xdc05000000000000}, [{}]}, 0xfdef) 23:01:16 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4e00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9401, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 383.577845][T18251] tun1: tun_chr_ioctl cmd 1074025677 23:01:17 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xdf7b000000000000}, [{}]}, 0xfdef) 23:01:17 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe76a000000000000}, [{}]}, 0xfdef) [ 383.612910][T18251] tun1: linktype set to 513 [ 383.785740][T18265] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 383.810099][T18265] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 383.882934][T18265] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:17 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5600, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9403, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:17 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xef59000000000000}, [{}]}, 0xfdef) 23:01:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xbb}}, './file0\x00'}) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xc, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x0, 0x5, 0x5, 0xa, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @call={0x85, 0x0, 0x0, 0xd}, @ldst={0x1, 0x1, 0x3, 0x7, 0x3, 0x80, 0x10}, @jmp={0x5, 0x0, 0x5, 0xb, 0xb, 0x100}, @jmp={0x5, 0x1, 0x2, 0xb, 0x1, 0x10, 0xfffffffffffffff1}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x4, &(0x7f0000000140)=""/4, 0x40f00, 0x1, '\x00', 0x0, 0xd, r1, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x3, 0x1, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r2]}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xbb}}, './file0\x00'}) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xc, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x0, 0x5, 0x5, 0xa, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @call={0x85, 0x0, 0x0, 0xd}, @ldst={0x1, 0x1, 0x3, 0x7, 0x3, 0x80, 0x10}, @jmp={0x5, 0x0, 0x5, 0xb, 0xb, 0x100}, @jmp={0x5, 0x1, 0x2, 0xb, 0x1, 0x10, 0xfffffffffffffff1}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x4, &(0x7f0000000140)=""/4, 0x40f00, 0x1, '\x00', 0x0, 0xd, r1, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x3, 0x1, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r2]}, 0x80) (async) 23:01:17 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:17 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf748000000000000}, [{}]}, 0xfdef) 23:01:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9a00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 384.022327][T18276] tun1: tun_chr_ioctl cmd 1074025677 [ 384.040840][T18276] tun1: linktype set to 513 23:01:17 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xff37000000000000}, [{}]}, 0xfdef) 23:01:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5865, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 384.071321][T18284] tun1: tun_chr_ioctl cmd 1074025673 23:01:17 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffec000000000000}, [{}]}, 0xfdef) 23:01:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9c02, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 384.244257][T18296] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 384.272445][T18296] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 384.335974][T18296] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:17 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414"], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5a03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xbb}}, './file0\x00'}) (async) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xc, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, @alu={0x7, 0x0, 0x5, 0x5, 0xa, 0x0, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @call={0x85, 0x0, 0x0, 0xd}, @ldst={0x1, 0x1, 0x3, 0x7, 0x3, 0x80, 0x10}, @jmp={0x5, 0x0, 0x5, 0xb, 0xb, 0x100}, @jmp={0x5, 0x1, 0x2, 0xb, 0x1, 0x10, 0xfffffffffffffff1}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x4, &(0x7f0000000140)=""/4, 0x40f00, 0x1, '\x00', 0x0, 0xd, r1, 0x8, &(0x7f00000001c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x3, 0x1, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)=[r2]}, 0x80) 23:01:17 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff00000000}, [{}]}, 0xfdef) 23:01:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xac00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:17 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:17 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfdef) 23:01:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5c02, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb402, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:18 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2}, [{}]}, 0xfdef) [ 384.557818][T18312] tun1: tun_chr_ioctl cmd 1074025677 [ 384.577033][T18312] tun1: linktype set to 513 23:01:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:18 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3}, [{}]}, 0xfdef) [ 384.752993][T18332] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 384.776094][T18332] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 384.801103][T18332] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:18 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414"], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb80a, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:18 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='ip_vt]0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="78000040000000970000000544d5005000660000021690787f0000010a0101000707c27f00000100441490200000000000000200000001ff000000094414bb2000000006000000060000000700000005440c80a16401010200000001"]}) sendmsg$can_j1939(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r2, 0x1, {0x2, 0xf0, 0x3}}, 0x18, &(0x7f00000002c0)={&(0x7f0000000200)="911fc2ff6e3916cfe8b586a55e2356ed001ceaf0dbb561d5c058c66f6cd4a1ccda4c5ad2fb63fb00b1fa0e42e08a60851c5856e547ab542eb3e12b5ba6bb2dcdd79e0c8268f48159d95ec51aa394dc585aaf2fff2f88bac520b590d6ed18697800ceef001c78fa125aeacdbb40be1c4f972c128678a0d7e90b1b7b7e8baefdbd2746538ffc1b188db94b8529368434ec1f1d475c9511", 0x96}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xd4047922f591fe37) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xff}, 0x18) ioctl$TUNSETLINK(r3, 0x400454cd, 0x201) 23:01:18 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4}, [{}]}, 0xfdef) 23:01:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6400, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:18 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xbc02, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:18 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5}, [{}]}, 0xfdef) 23:01:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6558, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:18 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6}, [{}]}, 0xfdef) 23:01:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd003, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 385.071672][T18343] tun1: tun_chr_ioctl cmd 1074025677 [ 385.081787][T18343] tun1: linktype set to 513 23:01:18 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7}, [{}]}, 0xfdef) [ 385.281150][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 385.322855][T18360] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:18 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414"], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6800, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:18 executing program 4: socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='ip_vt]0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="78000040000000970000000544d5005000660000021690787f0000010a0101000707c27f00000100441490200000000000000200000001ff000000094414bb2000000006000000060000000700000005440c80a16401010200000001"]}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='ip_vt]0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="78000040000000970000000544d5005000660000021690787f0000010a0101000707c27f00000100441490200000000000000200000001ff000000094414bb2000000006000000060000000700000005440c80a16401010200000001"]}) sendmsg$can_j1939(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r2, 0x1, {0x2, 0xf0, 0x3}}, 0x18, &(0x7f00000002c0)={&(0x7f0000000200)="911fc2ff6e3916cfe8b586a55e2356ed001ceaf0dbb561d5c058c66f6cd4a1ccda4c5ad2fb63fb00b1fa0e42e08a60851c5856e547ab542eb3e12b5ba6bb2dcdd79e0c8268f48159d95ec51aa394dc585aaf2fff2f88bac520b590d6ed18697800ceef001c78fa125aeacdbb40be1c4f972c128678a0d7e90b1b7b7e8baefdbd2746538ffc1b188db94b8529368434ec1f1d475c9511", 0x96}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xd4047922f591fe37) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xff}, 0x18) ioctl$TUNSETLINK(r3, 0x400454cd, 0x201) 23:01:18 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8}, [{}]}, 0xfdef) 23:01:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd402, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:18 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:18 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x11}, [{}]}, 0xfdef) 23:01:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd600, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6a01, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd800, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:19 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x60}, [{}]}, 0xfdef) [ 385.551054][T18366] tun1: tun_chr_ioctl cmd 1074025677 [ 385.557152][T18366] tun1: linktype set to 513 [ 385.566568][T18365] tun1: tun_chr_ioctl cmd 1074025673 23:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6c00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 385.782510][T18390] validate_nla: 1 callbacks suppressed [ 385.782524][T18390] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 385.830560][T18386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 385.853449][T18386] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:19 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb000000000000"], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd802, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:19 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='ip_vt]0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="78000040000000970000000544d5005000660000021690787f0000010a0101000707c27f00000100441490200000000000000200000001ff000000094414bb2000000006000000060000000700000005440c80a16401010200000001"]}) (async) sendmsg$can_j1939(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1d, r2, 0x1, {0x2, 0xf0, 0x3}}, 0x18, &(0x7f00000002c0)={&(0x7f0000000200)="911fc2ff6e3916cfe8b586a55e2356ed001ceaf0dbb561d5c058c66f6cd4a1ccda4c5ad2fb63fb00b1fa0e42e08a60851c5856e547ab542eb3e12b5ba6bb2dcdd79e0c8268f48159d95ec51aa394dc585aaf2fff2f88bac520b590d6ed18697800ceef001c78fa125aeacdbb40be1c4f972c128678a0d7e90b1b7b7e8baefdbd2746538ffc1b188db94b8529368434ec1f1d475c9511", 0x96}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xd4047922f591fe37) (async) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x1}, 0xff}, 0x18) (async) ioctl$TUNSETLINK(r3, 0x400454cd, 0x201) 23:01:19 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x87}, [{}]}, 0xfdef) 23:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7400, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:19 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:19 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x300}, [{}]}, 0xfdef) 23:01:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xdb07, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7a00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:19 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x500}, [{}]}, 0xfdef) [ 386.022589][T18407] tun1: tun_chr_ioctl cmd 1074025677 [ 386.029222][T18407] tun1: linktype set to 513 23:01:19 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x517}, [{}]}, 0xfdef) 23:01:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xdc01, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 386.195572][T18415] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 386.238184][T18415] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 386.307679][T18415] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:19 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb000000000000"], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7a02, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:19 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'macvlan1\x00'}) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000df7dcb250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003fa4b443000000000000"], 0x278) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:19 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5a8}, [{}]}, 0xfdef) 23:01:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xdc03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:19 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:19 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5dc}, [{}]}, 0xfdef) 23:01:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xde0a, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:19 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x600}, [{}]}, 0xfdef) 23:01:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7c01, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 386.533460][T18430] tun1: tun_chr_ioctl cmd 1074025677 [ 386.548399][T18430] tun1: linktype set to 513 23:01:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xdf0a, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:20 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x700}, [{}]}, 0xfdef) [ 386.757482][T18450] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 386.806204][T18444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 386.815645][T18444] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:20 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb000000000000"], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8100, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:20 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x727}, [{}]}, 0xfdef) 23:01:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe200, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'macvlan1\x00'}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'macvlan1\x00'}) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) (async) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000df7dcb250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003fa4b443000000000000"], 0x278) close(r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:20 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:20 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7dc}, [{}]}, 0xfdef) 23:01:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe203, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8502, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:20 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xabf}, [{}]}, 0xfdef) [ 387.044169][T18458] tun1: tun_chr_ioctl cmd 1074025677 [ 387.060166][T18458] tun1: linktype set to 513 23:01:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'macvlan1\x00'}) (async, rerun: 64) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) (async, rerun: 64) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000df7dcb250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003fa4b443000000000000"], 0x278) (async) close(r1) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async, rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (rerun: 64) 23:01:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8847, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 387.300716][T18483] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 387.342255][T18482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 387.367351][T18482] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:20 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/25], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe703, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:20 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xbb8}, [{}]}, 0xfdef) 23:01:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r0, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xd4047922f591fe22) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8848, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:20 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:20 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf16}, [{}]}, 0xfdef) 23:01:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe802, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r0, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20}) (async) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xd4047922f591fe22) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:21 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfcb}, [{}]}, 0xfdef) 23:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8e03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup2(r0, r0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x20}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x4]}, 0x8) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xd4047922f591fe22) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) [ 387.782929][T18515] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 387.806227][T18514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 387.815715][T18514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:21 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/25], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe803, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:21 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1067}, [{}]}, 0xfdef) 23:01:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/smscufx', 0x203240, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x202100, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/mcfilter\x00') ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000180)) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xd4047922f591fe0d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9403, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:21 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:21 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1100}, [{}]}, 0xfdef) 23:01:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xea01, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9a00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:21 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x160f}, [{}]}, 0xfdef) 23:01:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xea03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/smscufx', 0x203240, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x202100, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/mcfilter\x00') ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000180)) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xd4047922f591fe0d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) [ 388.248958][T18548] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 388.268634][T18548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 388.289376][T18548] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:21 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/25], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:21 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1705}, [{}]}, 0xfdef) 23:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9c02, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xee03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async, rerun: 64) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/smscufx', 0x203240, 0x0) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x202100, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/mcfilter\x00') ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r1, 0x8008f511, &(0x7f0000000180)) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xd4047922f591fe0d) (async, rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:21 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:21 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x17ba}, [{}]}, 0xfdef) 23:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xac00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:21 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:21 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1bb7}, [{}]}, 0xfdef) 23:01:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf501, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb402, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 388.504373][T18570] tun1: tun_chr_ioctl cmd 1074025677 [ 388.522270][T18570] tun1: linktype set to 513 [ 388.696963][T18579] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 388.743341][T18574] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 388.802834][T18574] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:22 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/27], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:22 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1fa9}, [{}]}, 0xfdef) 23:01:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb80a, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf802, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x1000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) 23:01:22 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:22 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x215f}, [{}]}, 0xfdef) 23:01:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf803, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:22 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xbc02, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:22 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2707}, [{}]}, 0xfdef) [ 388.951642][T18588] tun1: tun_chr_ioctl cmd 1074025677 [ 388.966473][T18588] tun1: linktype set to 513 23:01:22 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2798}, [{}]}, 0xfdef) 23:01:22 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) [ 389.059104][T18611] tun1: tun_chr_ioctl cmd 1074025677 [ 389.064664][T18611] tun1: linktype set to 513 [ 389.199755][T18613] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 389.226929][T18613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 389.236416][T18613] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:23 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/27], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:23 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2caf}, [{}]}, 0xfdef) 23:01:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfa03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc203, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gretap0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 23:01:23 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:23 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2f87}, [{}]}, 0xfdef) 23:01:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc302, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 389.634837][T18620] tun1: tun_chr_ioctl cmd 1074025677 [ 389.648301][T18620] tun1: linktype set to 513 23:01:23 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3257}, [{}]}, 0xfdef) 23:01:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfc03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd402, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:23 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3776}, [{}]}, 0xfdef) [ 389.917924][T18641] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 389.930645][T18641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 389.940286][T18641] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:23 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/27], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:23 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gretap0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 23:01:23 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x37ff}, [{}]}, 0xfdef) 23:01:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff7f, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd600, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:23 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:23 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3da7}, [{}]}, 0xfdef) 23:01:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd800, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 390.098049][T18650] tun1: tun_chr_ioctl cmd 1074025677 [ 390.106171][T18650] tun1: linktype set to 513 [ 390.134597][T18654] tun1: tun_chr_ioctl cmd 1074025677 23:01:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3ffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:23 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3f65}, [{}]}, 0xfdef) [ 390.146814][T18654] tun1: linktype set to 513 23:01:23 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4000}, [{}]}, 0xfdef) 23:01:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xdc01, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 390.349616][T18665] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 390.400710][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 390.430907][T18669] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:24 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r6, 0x401) syncfs(r6) ftruncate(r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r8, 0x401) syncfs(r7) ftruncate(r7, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r5, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r6, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x40000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gretap0\x00', 0x2}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gretap0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 23:01:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xde03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:24 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x434f}, [{}]}, 0xfdef) 23:01:24 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:24 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4754}, [{}]}, 0xfdef) 23:01:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xde0a, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x100000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:24 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x48f7}, [{}]}, 0xfdef) [ 390.722777][T18685] tun1: tun_chr_ioctl cmd 1074025677 [ 390.749686][T18685] tun1: linktype set to 513 23:01:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xdf0a, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 390.992314][T18697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 391.016704][T18697] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:24 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r6, 0x401) syncfs(r6) ftruncate(r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r8, 0x401) syncfs(r7) ftruncate(r7, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r5, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r6, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:24 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4e9f}, [{}]}, 0xfdef) 23:01:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe203, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:24 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:24 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4f43}, [{}]}, 0xfdef) 23:01:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xea01, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:24 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4ff8}, [{}]}, 0xfdef) 23:01:24 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5447}, [{}]}, 0xfdef) [ 391.274375][T18711] tun1: tun_chr_ioctl cmd 1074025677 [ 391.286292][T18711] tun1: linktype set to 513 23:01:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xea03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 391.465338][T18729] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 391.550438][T18729] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:25 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r6, 0x401) syncfs(r6) ftruncate(r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r8, 0x401) syncfs(r7) ftruncate(r7, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r5, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r6, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:25 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5732}, [{}]}, 0xfdef) 23:01:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xec00, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:25 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:25 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x57e7}, [{}]}, 0xfdef) 23:01:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xee03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:25 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x59ef}, [{}]}, 0xfdef) 23:01:25 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5f21}, [{}]}, 0xfdef) 23:01:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x2}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) [ 391.910312][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 391.969535][T18766] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:25 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf002, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:25 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5f97}, [{}]}, 0xfdef) 23:01:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xb2]}, 0x8, 0x800) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:25 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:25 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5fd6}, [{}]}, 0xfdef) 23:01:25 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6000}, [{}]}, 0xfdef) [ 392.189138][T18775] tun1: tun_chr_ioctl cmd 1074025677 [ 392.206703][T18775] tun1: linktype set to 513 23:01:25 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf203, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:25 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x653f}, [{}]}, 0xfdef) 23:01:25 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1000}) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xb2]}, 0x8, 0x800) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)) (async, rerun: 32) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (rerun: 32) [ 392.425189][T18798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 392.486046][T18798] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:26 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:26 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6710}, [{}]}, 0xfdef) 23:01:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf502, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xb2]}, 0x8, 0x800) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xb2]}, 0x8, 0x800) (async) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) 23:01:26 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:26 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x67c5}, [{}]}, 0xfdef) 23:01:26 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6ae7}, [{}]}, 0xfdef) 23:01:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf801, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:26 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6fb4}, [{}]}, 0xfdef) [ 392.736488][T18808] tun1: tun_chr_ioctl cmd 1074025677 [ 392.742259][T18808] tun1: linktype set to 513 23:01:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf802, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 392.930390][T18831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 392.971586][T18831] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:26 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:26 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x708f}, [{}]}, 0xfdef) 23:01:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:26 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfa03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:26 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfc03, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:26 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7637}, [{}]}, 0xfdef) 23:01:26 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x77a3}, [{}]}, 0xfdef) 23:01:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:26 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7bdf}, [{}]}, 0xfdef) 23:01:26 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7f92}, [{}]}, 0xfdef) [ 393.376664][T18859] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 393.473358][T18859] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:27 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0), 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff7f, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:27 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8187}, [{}]}, 0xfdef) 23:01:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:27 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:27 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8700}, [{}]}, 0xfdef) 23:01:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3ffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:27 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x872f}, [{}]}, 0xfdef) 23:01:27 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8781}, [{}]}, 0xfdef) 23:01:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) [ 393.868804][T18891] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 393.923904][T18891] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:27 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0), 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x40000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:27 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8cd7}, [{}]}, 0xfdef) 23:01:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) 23:01:27 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:27 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8f70}, [{}]}, 0xfdef) 23:01:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x100000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:27 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x927f}, [{}]}, 0xfdef) 23:01:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:27 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) 23:01:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 394.450920][T18921] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 394.493497][T18921] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:28 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0), 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:28 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x975f}, [{}]}, 0xfdef) 23:01:28 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) 23:01:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:28 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:28 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9827}, [{}]}, 0xfdef) 23:01:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:28 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9dcf}, [{}]}, 0xfdef) 23:01:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:28 executing program 4: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfdef) dup(r1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x26, "2dd41757da3ee88b3e969a3865980f7e2eb82c3a0ad983b55ff8c96639d6bf3b5e9042816358"}, &(0x7f0000000100)=0x2e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xd4047922f591fe37) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x201) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r4, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) [ 394.828838][T18947] tun1: tun_chr_ioctl cmd 1074025677 [ 394.835563][T18947] tun1: linktype set to 513 [ 394.970039][T18951] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 394.980160][T18951] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:28 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{0x0}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:28 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9f4e}, [{}]}, 0xfdef) 23:01:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:28 executing program 4: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfdef) dup(r1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x26, "2dd41757da3ee88b3e969a3865980f7e2eb82c3a0ad983b55ff8c96639d6bf3b5e9042816358"}, &(0x7f0000000100)=0x2e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xd4047922f591fe37) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x201) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r4, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) (async) socket$inet6(0xa, 0x80002, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) (async) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) (async) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfdef) (async) dup(r1) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x26, "2dd41757da3ee88b3e969a3865980f7e2eb82c3a0ad983b55ff8c96639d6bf3b5e9042816358"}, &(0x7f0000000100)=0x2e) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xd4047922f591fe37) (async) pipe2(&(0x7f0000000140), 0x80) (async) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) (async) ioctl$TUNSETLINK(r2, 0x400454cd, 0x201) (async) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) write$9p(r4, &(0x7f0000001400)=';', 0x1) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) (async) 23:01:28 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:28 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa377}, [{}]}, 0xfdef) 23:01:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:28 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa73d}, [{}]}, 0xfdef) [ 395.193276][T18960] tun1: tun_chr_ioctl cmd 1074025677 [ 395.210344][T18960] tun1: linktype set to 513 23:01:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x10000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:28 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa7f2}, [{}]}, 0xfdef) [ 395.424350][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 395.481084][T18995] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:29 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{0x0}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:29 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa805}, [{}]}, 0xfdef) 23:01:29 executing program 4: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffff}}, './file0\x00'}) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfdef) (async, rerun: 64) dup(r1) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x26, "2dd41757da3ee88b3e969a3865980f7e2eb82c3a0ad983b55ff8c96639d6bf3b5e9042816358"}, &(0x7f0000000100)=0x2e) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xd4047922f591fe37) (async, rerun: 64) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x201) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r4, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x1) 23:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x11000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:29 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:29 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa91f}, [{}]}, 0xfdef) 23:01:29 executing program 4: setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="000aef00844dc147734f351ea776153f141da95286dc3f61ec99b9af878b7b48d1b9ad915819050000005e67b3a41f63f8af1a0ef4fe7d161c673a4da7fa8c63a542c7d8f3ad1527e7033d303fc23d908b739ddb048f005134e6cf54047c7d5091edd26d58da4e2a9d13b500b152a2564a18d259549f33f492c85b5166451c73fcf137422cb51ddea16532124531136500b8bdb23037bad96b0bf25030c19fa83b2fbfd49a34ffd5c408e5147d7bc6d5adf35c6e38d25490cfd7013865e4f5eaaead178f66159e34bef91ad20c6eee02c8b403264817e1252dde96367fe23c0c3149217f3b8f39e7234d25b048a8c204d9e550"], 0xf7) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r0, &(0x7f0000001400)=';', 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0xe3a8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r1, 0x3}, &(0x7f0000000240)=0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r2, 0x400454cd, 0x201) 23:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:29 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xaec7}, [{}]}, 0xfdef) 23:01:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x12000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 395.672762][T19015] tun1: tun_chr_ioctl cmd 1074025677 23:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 395.696111][T19015] tun1: linktype set to 513 [ 395.902193][T19028] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 395.985279][T19028] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:29 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{0x0}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:29 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xaf2c}, [{}]}, 0xfdef) 23:01:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1c030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:29 executing program 4: setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="000aef00844dc147734f351ea776153f141da95286dc3f61ec99b9af878b7b48d1b9ad915819050000005e67b3a41f63f8af1a0ef4fe7d161c673a4da7fa8c63a542c7d8f3ad1527e7033d303fc23d908b739ddb048f005134e6cf54047c7d5091edd26d58da4e2a9d13b500b152a2564a18d259549f33f492c85b5166451c73fcf137422cb51ddea16532124531136500b8bdb23037bad96b0bf25030c19fa83b2fbfd49a34ffd5c408e5147d7bc6d5adf35c6e38d25490cfd7013865e4f5eaaead178f66159e34bef91ad20c6eee02c8b403264817e1252dde96367fe23c0c3149217f3b8f39e7234d25b048a8c204d9e550"], 0xf7) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r0, &(0x7f0000001400)=';', 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0xe3a8}, &(0x7f00000001c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0xe3a8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r1, 0x3}, &(0x7f0000000240)=0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r2, 0x400454cd, 0x201) 23:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:29 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:29 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xafe1}, [{}]}, 0xfdef) [ 396.112391][T19038] tun1: tun_chr_ioctl cmd 1074025677 23:01:29 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb46f}, [{}]}, 0xfdef) 23:01:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x20000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 396.136037][T19038] tun1: linktype set to 513 23:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:29 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb71b}, [{}]}, 0xfdef) 23:01:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x24000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 396.354092][T19058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 396.375743][T19058] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:29 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:29 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb7d0}, [{}]}, 0xfdef) 23:01:29 executing program 4: setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="000aef00844dc147734f351ea776153f141da95286dc3f61ec99b9af878b7b48d1b9ad915819050000005e67b3a41f63f8af1a0ef4fe7d161c673a4da7fa8c63a542c7d8f3ad1527e7033d303fc23d908b739ddb048f005134e6cf54047c7d5091edd26d58da4e2a9d13b500b152a2564a18d259549f33f492c85b5166451c73fcf137422cb51ddea16532124531136500b8bdb23037bad96b0bf25030c19fa83b2fbfd49a34ffd5c408e5147d7bc6d5adf35c6e38d25490cfd7013865e4f5eaaead178f66159e34bef91ad20c6eee02c8b403264817e1252dde96367fe23c0c3149217f3b8f39e7234d25b048a8c204d9e550"], 0xf7) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r0, &(0x7f0000001400)=';', 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0, 0xe3a8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r1, 0x3}, &(0x7f0000000240)=0xc) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r2, 0x400454cd, 0x201) 23:01:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x25000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:29 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:29 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb80b}, [{}]}, 0xfdef) 23:01:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xba17}, [{}]}, 0xfdef) [ 396.530114][T19066] tun1: tun_chr_ioctl cmd 1074025677 [ 396.548180][T19066] tun1: linktype set to 513 23:01:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x28080000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xbf0a}, [{}]}, 0xfdef) 23:01:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000040), &(0x7f0000003e80)=0x0, &(0x7f0000003ec0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003bc0)={{0x1, 0x1, 0x18, r0, {r1, 0xee01}}, './file0\x00'}) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003c00)={0x6e, 0x33, 0x4, 0x0, 0x0, "", [@generic="9a84de2ca5a881abcf24a735fa5af9f4d0240f75ae420899e0952643430401983eb00bc4531f38150a9bead2f1e629422f320a4d53916dd05c3f37c95b3d59010db3242ca80af6", @nested={0x74, 0x200, 0x0, 0x1, [@generic="3f222b7020e8255d7ef888d53819320c868d370b3ee364b81e2b32778e782bf9f5def019898df62858700cb3022618f50f3fa30cdfaf94af9eb216b034d68f69b70eb57e959e1e0582d95bedfab8352ea7fb7630e4a406c1056fcc2ea49f933bb791e3d7a8a0713d12c896bb4b99f29a"]}, @typed={0x8, 0x76, 0x0, 0x0, @uid=r1}]}, 0xd4}], 0x1, 0x0, 0x0, 0x1}, 0x8080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000003b40)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a40)={0xa8, r2, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x75}}}}, [@NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x81, 0x4, 0x5, 0x5, 0x0, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x36, 0xb, 0x4, 0x2, 0x6c, 0x6c, 0x16, 0xf, 0x6, 0x12, 0x1, 0x1, 0x3, 0x48, 0x3, 0x1, 0x6, 0x6c, 0x18, 0x1, 0x6, 0xb, 0x2, 0x30, 0x30, 0xf, 0x6c, 0x48, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/155, 0x9b}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x6, &(0x7f0000002500)=""/17, 0x11}, 0x7}], 0x1, 0x10002, &(0x7f0000002580)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800, 0x33}}, './file0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x1000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0x1}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xd4047922f591fe2f) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000003f40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f00)={&(0x7f0000003d40)={0x104, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x5}}]}, 0x104}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x201) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000003b80)=0x3, 0x4) write$binfmt_elf64(r4, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfdef) recvmsg(r4, &(0x7f0000003980)={&(0x7f00000025c0)=@pppol2tp, 0x80, &(0x7f0000003900)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/8, 0x8}, {&(0x7f0000003680)=""/186, 0xba}, {&(0x7f0000003740)=""/173, 0xad}, {&(0x7f0000003800)=""/206, 0xce}], 0x5}, 0x40000140) [ 396.804414][T19087] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 396.814070][T19087] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:30 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2a000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getresuid(&(0x7f0000000040), &(0x7f0000003e80)=0x0, &(0x7f0000003ec0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003bc0)={{0x1, 0x1, 0x18, r0, {r1, 0xee01}}, './file0\x00'}) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003c00)={0x6e, 0x33, 0x4, 0x0, 0x0, "", [@generic="9a84de2ca5a881abcf24a735fa5af9f4d0240f75ae420899e0952643430401983eb00bc4531f38150a9bead2f1e629422f320a4d53916dd05c3f37c95b3d59010db3242ca80af6", @nested={0x74, 0x200, 0x0, 0x1, [@generic="3f222b7020e8255d7ef888d53819320c868d370b3ee364b81e2b32778e782bf9f5def019898df62858700cb3022618f50f3fa30cdfaf94af9eb216b034d68f69b70eb57e959e1e0582d95bedfab8352ea7fb7630e4a406c1056fcc2ea49f933bb791e3d7a8a0713d12c896bb4b99f29a"]}, @typed={0x8, 0x76, 0x0, 0x0, @uid=r1}]}, 0xd4}], 0x1, 0x0, 0x0, 0x1}, 0x8080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000003b40)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a40)={0xa8, r2, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x75}}}}, [@NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x81, 0x4, 0x5, 0x5, 0x0, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x36, 0xb, 0x4, 0x2, 0x6c, 0x6c, 0x16, 0xf, 0x6, 0x12, 0x1, 0x1, 0x3, 0x48, 0x3, 0x1, 0x6, 0x6c, 0x18, 0x1, 0x6, 0xb, 0x2, 0x30, 0x30, 0xf, 0x6c, 0x48, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/155, 0x9b}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x6, &(0x7f0000002500)=""/17, 0x11}, 0x7}], 0x1, 0x10002, &(0x7f0000002580)={0x77359400}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800, 0x33}}, './file0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x1000}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0x1}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xd4047922f591fe2f) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000003f40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f00)={&(0x7f0000003d40)={0x104, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x5}}]}, 0x104}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x201) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000003b80)=0x3, 0x4) write$binfmt_elf64(r4, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfdef) recvmsg(r4, &(0x7f0000003980)={&(0x7f00000025c0)=@pppol2tp, 0x80, &(0x7f0000003900)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/8, 0x8}, {&(0x7f0000003680)=""/186, 0xba}, {&(0x7f0000003740)=""/173, 0xad}, {&(0x7f0000003800)=""/206, 0xce}], 0x5}, 0x40000140) socket$nl_generic(0x10, 0x3, 0x10) (async) getresuid(&(0x7f0000000040), &(0x7f0000003e80), &(0x7f0000003ec0)) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003bc0)={{0x1, 0x1, 0x18, r0, {r1, 0xee01}}, './file0\x00'}) (async) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003c00)={0x6e, 0x33, 0x4, 0x0, 0x0, "", [@generic="9a84de2ca5a881abcf24a735fa5af9f4d0240f75ae420899e0952643430401983eb00bc4531f38150a9bead2f1e629422f320a4d53916dd05c3f37c95b3d59010db3242ca80af6", @nested={0x74, 0x200, 0x0, 0x1, [@generic="3f222b7020e8255d7ef888d53819320c868d370b3ee364b81e2b32778e782bf9f5def019898df62858700cb3022618f50f3fa30cdfaf94af9eb216b034d68f69b70eb57e959e1e0582d95bedfab8352ea7fb7630e4a406c1056fcc2ea49f933bb791e3d7a8a0713d12c896bb4b99f29a"]}, @typed={0x8, 0x76, 0x0, 0x0, @uid=r1}]}, 0xd4}], 0x1, 0x0, 0x0, 0x1}, 0x8080) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000003a00), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000003b40)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a40)={0xa8, r2, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x75}}}}, [@NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x81, 0x4, 0x5, 0x5, 0x0, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x36, 0xb, 0x4, 0x2, 0x6c, 0x6c, 0x16, 0xf, 0x6, 0x12, 0x1, 0x1, 0x3, 0x48, 0x3, 0x1, 0x6, 0x6c, 0x18, 0x1, 0x6, 0xb, 0x2, 0x30, 0x30, 0xf, 0x6c, 0x48, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/155, 0x9b}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x6, &(0x7f0000002500)=""/17, 0x11}, 0x7}], 0x1, 0x10002, &(0x7f0000002580)={0x77359400}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800, 0x33}}, './file0\x00'}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x1000}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xd4047922f591fe2f) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000003f40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f00)={&(0x7f0000003d40)={0x104, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x5}}]}, 0x104}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x201) (async) socket$inet6(0xa, 0x80002, 0x0) (async) sendto$inet6(r4, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000003b80)=0x3, 0x4) (async) write$binfmt_elf64(r4, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfdef) (async) recvmsg(r4, &(0x7f0000003980)={&(0x7f00000025c0)=@pppol2tp, 0x80, &(0x7f0000003900)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/8, 0x8}, {&(0x7f0000003680)=""/186, 0xba}, {&(0x7f0000003740)=""/173, 0xad}, {&(0x7f0000003800)=""/206, 0xce}], 0x5}, 0x40000140) (async) 23:01:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xbfbf}, [{}]}, 0xfdef) 23:01:30 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xc567}, [{}]}, 0xfdef) 23:01:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) getresuid(&(0x7f0000000040), &(0x7f0000003e80)=0x0, &(0x7f0000003ec0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003bc0)={{0x1, 0x1, 0x18, r0, {r1, 0xee01}}, './file0\x00'}) (async) sendmsg$netlink(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000003c00)={0x6e, 0x33, 0x4, 0x0, 0x0, "", [@generic="9a84de2ca5a881abcf24a735fa5af9f4d0240f75ae420899e0952643430401983eb00bc4531f38150a9bead2f1e629422f320a4d53916dd05c3f37c95b3d59010db3242ca80af6", @nested={0x74, 0x200, 0x0, 0x1, [@generic="3f222b7020e8255d7ef888d53819320c868d370b3ee364b81e2b32778e782bf9f5def019898df62858700cb3022618f50f3fa30cdfaf94af9eb216b034d68f69b70eb57e959e1e0582d95bedfab8352ea7fb7630e4a406c1056fcc2ea49f933bb791e3d7a8a0713d12c896bb4b99f29a"]}, @typed={0x8, 0x76, 0x0, 0x0, @uid=r1}]}, 0xd4}], 0x1, 0x0, 0x0, 0x1}, 0x8080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000003b40)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003b00)={&(0x7f0000003a40)={0xa8, r2, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x75}}}}, [@NL80211_ATTR_TX_RATES={0x88, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5, 0x81, 0x4, 0x5, 0x5, 0x0, 0xfffe]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0x36, 0xb, 0x4, 0x2, 0x6c, 0x6c, 0x16, 0xf, 0x6, 0x12, 0x1, 0x1, 0x3, 0x48, 0x3, 0x1, 0x6, 0x6c, 0x18, 0x1, 0x6, 0xb, 0x2, 0x30, 0x30, 0xf, 0x6c, 0x48, 0x18]}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x4048080) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002540)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000180)=""/242, 0xf2}, {&(0x7f0000000280)=""/4, 0x4}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/155, 0x9b}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x6, &(0x7f0000002500)=""/17, 0x11}, 0x7}], 0x1, 0x10002, &(0x7f0000002580)={0x77359400}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800, 0x33}}, './file0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x1000}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xd4047922f591fe2f) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r3, &(0x7f0000003f40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f00)={&(0x7f0000003d40)={0x104, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x2}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x5}, {0x8, 0x15, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x80}, {0x8, 0x15, 0x5}}]}, 0x104}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x201) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) (async) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000003b80)=0x3, 0x4) (async) write$binfmt_elf64(r4, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfdef) (async) recvmsg(r4, &(0x7f0000003980)={&(0x7f00000025c0)=@pppol2tp, 0x80, &(0x7f0000003900)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000003640)=""/8, 0x8}, {&(0x7f0000003680)=""/186, 0xba}, {&(0x7f0000003740)=""/173, 0xad}, {&(0x7f0000003800)=""/206, 0xce}], 0x5}, 0x40000140) 23:01:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2f000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xc7ae}, [{}]}, 0xfdef) 23:01:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 397.392588][T19135] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 397.435032][T19135] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x38020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:30 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, 0xffffffffffffffff}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000000340)=':', 0x1) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20000, 0xe3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000300)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x34}, 0x1, 0xfcffffff00000000}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$netlink(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)={0x24, 0x33, 0xb28e6193c5bb06e9, 0x0, 0x0, "", [@typed={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x24}], 0x1}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x109000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5f5fe1d6, 0x0, 0x0, 0x0, 0xde}, [@call={0x85, 0x0, 0x0, 0x84}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x5, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, r1, r2, 0x1, r3, r4, r8, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcb0f}, [{}]}, 0xfdef) 23:01:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x10000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:30 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:30 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:30 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcf9d}, [{}]}, 0xfdef) 23:01:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x11000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:31 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xd0b7}, [{}]}, 0xfdef) [ 397.604518][T19146] tun1: tun_chr_ioctl cmd 1074025677 23:01:31 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xd65f}, [{}]}, 0xfdef) [ 397.638221][T19146] tun1: linktype set to 513 23:01:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3f000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x12000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, 0xffffffffffffffff}) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000000340)=':', 0x1) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20000, 0xe3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000300)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x34}, 0x1, 0xfcffffff00000000}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000300)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x34}, 0x1, 0xfcffffff00000000}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$netlink(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)={0x24, 0x33, 0xb28e6193c5bb06e9, 0x0, 0x0, "", [@typed={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x24}], 0x1}, 0x0) (async) sendmsg$netlink(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)={0x24, 0x33, 0xb28e6193c5bb06e9, 0x0, 0x0, "", [@typed={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x24}], 0x1}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x109000, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x109000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5f5fe1d6, 0x0, 0x0, 0x0, 0xde}, [@call={0x85, 0x0, 0x0, 0x84}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x5, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, r1, r2, 0x1, r3, r4, r8, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5f5fe1d6, 0x0, 0x0, 0x0, 0xde}, [@call={0x85, 0x0, 0x0, 0x84}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x5, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, r1, r2, 0x1, r3, r4, r8, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:31 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xd78c}, [{}]}, 0xfdef) [ 397.787563][T19158] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 397.834125][T19170] tun1: tun_chr_ioctl cmd 1074025677 [ 397.849310][T19170] tun1: linktype set to 513 23:01:31 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:31 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xdc05}, [{}]}, 0xfdef) 23:01:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x40000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x18030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x1, 0xffffffffffffffff}) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000000340)=':', 0x1) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20000, 0xe3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000300)={0x0, 0xf000, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r7, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x34}, 0x1, 0xfcffffff00000000}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$netlink(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)={0x24, 0x33, 0xb28e6193c5bb06e9, 0x0, 0x0, "", [@typed={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x24}], 0x1}, 0x0) (async) sendmsg$netlink(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000100)={0x24, 0x33, 0xb28e6193c5bb06e9, 0x0, 0x0, "", [@typed={0x4}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x24}], 0x1}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x109000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) (async) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5f5fe1d6, 0x0, 0x0, 0x0, 0xde}, [@call={0x85, 0x0, 0x0, 0x84}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x5, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, r1, r2, 0x1, r3, r4, r8, 0xffffffffffffffff]}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5f5fe1d6, 0x0, 0x0, 0x0, 0xde}, [@call={0x85, 0x0, 0x0, 0x84}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x5, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, r1, r2, 0x1, r3, r4, r8, 0xffffffffffffffff]}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:31 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:31 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xdc07}, [{}]}, 0xfdef) 23:01:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1a000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x46010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 398.029629][T19185] tun1: tun_chr_ioctl cmd 1074025673 23:01:31 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xdf7b}, [{}]}, 0xfdef) 23:01:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x1c030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:31 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe1af}, [{}]}, 0xfdef) [ 398.089973][T19184] tun1: tun_chr_ioctl cmd 1074025677 [ 398.095446][T19184] tun1: linktype set to 513 [ 398.238490][T19201] __nla_validate_parse: 1 callbacks suppressed [ 398.238502][T19201] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 398.259632][T19201] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:31 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:31 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe757}, [{}]}, 0xfdef) 23:01:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x48000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x20000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:31 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2880, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:31 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:31 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe76a}, [{}]}, 0xfdef) 23:01:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x24000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:31 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xecff}, [{}]}, 0xfdef) [ 398.461347][T19210] tun1: tun_chr_ioctl cmd 1074025677 23:01:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4a000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 398.483051][T19210] tun1: linktype set to 513 23:01:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x25000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:31 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xef59}, [{}]}, 0xfdef) [ 398.673078][T19231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 23:01:32 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4c000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf2a7}, [{}]}, 0xfdef) 23:01:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2f000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2880, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2880, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:32 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) [ 398.768572][T19231] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf748}, [{}]}, 0xfdef) 23:01:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4e000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x32010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf84f}, [{}]}, 0xfdef) 23:01:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x54010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xff37}, [{}]}, 0xfdef) [ 398.873752][T19240] tun1: tun_chr_ioctl cmd 1074025677 [ 398.909614][T19240] tun1: linktype set to 513 [ 399.139418][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 399.209739][T19261] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:32 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x38020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffec}, [{}]}, 0xfdef) 23:01:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x58020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:32 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2880, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:32 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1000000}, [{}]}, 0xfdef) 23:01:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5a030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2000000}, [{}]}, 0xfdef) 23:01:32 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3000000}, [{}]}, 0xfdef) 23:01:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3f000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 399.363816][T19281] tun1: tun_chr_ioctl cmd 1074025673 [ 399.373753][T19272] tun1: tun_chr_ioctl cmd 1074025677 [ 399.390265][T19272] tun1: linktype set to 513 [ 399.639091][T19294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 399.661262][T19294] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:33 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5c020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:33 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4000000}, [{}]}, 0xfdef) 23:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x40000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x10}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:33 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:33 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5000000}, [{}]}, 0xfdef) 23:01:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x10}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x48000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5c030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:33 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6000000}, [{}]}, 0xfdef) 23:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4a000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 400.188478][T19325] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 400.245679][T19325] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:33 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17", 0x2b}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x10}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'ipvlan1\x00', 0x10}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:33 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7000000}, [{}]}, 0xfdef) 23:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4a010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:33 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:33 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7270000}, [{}]}, 0xfdef) 23:01:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000011c0)=0x2) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x24}, 0x10) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r3, &(0x7f0000001400)=';', 0x1) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000001140)={0x2, &(0x7f0000001100)=[{0xe, 0x4, 0xf9, 0x6}, {0x3, 0x0, 0xff, 0x7}]}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000001200)={0x1, 0xa4, "58086ed108e16a533a46363205599cefde7e5690d8d9e14cbddac05618794e0602ff4930d54a53c84356352bff4189c37fe020c2e82893ef3a414a7ba16a0412059fb34ca7a39591382600602856fcdd002eb3a8911a7e5d7a45acad63cfb07b39d41ad29416e580743581e119eca672240f29aa46984f5bca89cb95eff8e50a355a83c30a982d8a0d0c42ff61a206f78c72bfe9f967b9e96c95b975746ca862938837ee"}) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000100)={{r0}, "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"}) 23:01:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4c000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:33 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7dc0000}, [{}]}, 0xfdef) 23:01:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x62020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:33 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8000000}, [{}]}, 0xfdef) [ 400.557842][T19347] tun1: tun_chr_ioctl cmd 1074025677 [ 400.570987][T19347] tun1: linktype set to 513 [ 400.637790][T19347] tun1: tun_chr_ioctl cmd 3221513862 [ 400.734255][T19356] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 400.809880][T19356] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:34 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x64000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:34 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf160000}, [{}]}, 0xfdef) 23:01:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4c080000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:34 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000011c0)=0x2) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x24}, 0x10) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r3, &(0x7f0000001400)=';', 0x1) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000001140)={0x2, &(0x7f0000001100)=[{0xe, 0x4, 0xf9, 0x6}, {0x3, 0x0, 0xff, 0x7}]}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000001200)={0x1, 0xa4, "58086ed108e16a533a46363205599cefde7e5690d8d9e14cbddac05618794e0602ff4930d54a53c84356352bff4189c37fe020c2e82893ef3a414a7ba16a0412059fb34ca7a39591382600602856fcdd002eb3a8911a7e5d7a45acad63cfb07b39d41ad29416e580743581e119eca672240f29aa46984f5bca89cb95eff8e50a355a83c30a982d8a0d0c42ff61a206f78c72bfe9f967b9e96c95b975746ca862938837ee"}) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000100)={{r0}, "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"}) 23:01:34 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4e000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:34 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfcb0000}, [{}]}, 0xfdef) 23:01:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x56000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 401.197064][T19366] tun1: tun_chr_ioctl cmd 1074025677 [ 401.203881][T19366] tun1: linktype set to 513 23:01:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x65580000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5a030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x68000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 401.452563][T19383] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 401.567187][T19383] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:35 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:35 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x11000000}, [{}]}, 0xfdef) 23:01:35 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000011c0)=0x2) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x24}, 0x10) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r3, &(0x7f0000001400)=';', 0x1) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000001140)={0x2, &(0x7f0000001100)=[{0xe, 0x4, 0xf9, 0x6}, {0x3, 0x0, 0xff, 0x7}]}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000001200)={0x1, 0xa4, "58086ed108e16a533a46363205599cefde7e5690d8d9e14cbddac05618794e0602ff4930d54a53c84356352bff4189c37fe020c2e82893ef3a414a7ba16a0412059fb34ca7a39591382600602856fcdd002eb3a8911a7e5d7a45acad63cfb07b39d41ad29416e580743581e119eca672240f29aa46984f5bca89cb95eff8e50a355a83c30a982d8a0d0c42ff61a206f78c72bfe9f967b9e96c95b975746ca862938837ee"}) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000100)={{r0}, "0eb694072505d4cb79342f5c5e53e5aa797e76534b43c3ac9129d82e201d8c01f0fb169ebf814de276d04741f2cfdf9d6b063baded711d930027dc51f0c3f2c01813114128961870c0d3b58d594fddfb5f11bec374859ec01f8047af201d819631ee850b776e66d17066d8c507a6e34a6c536ffd688a2b47484f3a1196f8854e23b98c6fb38346a89cbe57bd32a672df8497d7a8aa81052d40ebd30cd95b627ef0e500927f6263d0b0b5122dd66583530d0674ba4645fc981b0d8f70f10aab9a47ba8ac496b1d077de1a881d53fc9c7825051b562f675eae800697b8510ff88a660fa268d9ba0bda383976b244eb806543e9230bfc9aa8af5a9a664695976cb5d85dd8b5ea868299635f329f5217698cd8bafa8a5e525538b57ad5cee9fb8bafdf72c000c109654a4ab0caa192e7d0ceb6fb20a2411cf477c0d77e03fa16550e14a9bfd9085d46ffdeb0416cfe3bfe536ef944018ba08ce412b249bab8776a755ad4005d34ece4556fcb3e9e378526ce7d82a5ed4264a97b122c6639edcc34c6943e4c1e4b2923221c77adac5f34f41ba8ead92a9bf74c1ae5673d30ddd9df686a359ea558823bedaa009bbe53f2664511dfa358eddbe66c72c8707d0d2a2b2c401a5cb7950fa943ec54c438fa8b6b58edd4863c1bde0aa4aefbe47b0cb9503431133bf18848722519f2449ef545e56ac4c7aaabc5b9fc45ba32af7c72395f5a98e082b9616e6c623f29931b24d33e69fe53be7f0d1e01221de70dfb331c3167fd9f12a1163a6512b7f65f83805d16e589db9afacd16d6f253452b2728bf7bcdf6cb98f3d21dc07ba657ac2fd4d5b1d6ebc37d9cc76a04d25dae48203c10b60d09030069065f6b0618410ea80d9d21e4f4d0284ca1f899757f47f95ebcc38617ca9320646e9046204c5a6e5808cc699fcdd0eb398f68bd234af8c99d6f52f40d2eba2c02c0b3670ced9bf59780bbd43f7928f8122af6435b6df2b0bcdbd489973496eb1ac653ac57d24a8d7724f1749780af18c442c157f19226665b3080d98f117a4339bf6186a76305b916217e99d5cc08bbe6728e76b310edff1efa57c4d550c55a290d298aadfbcd6085e1f68c6c600c9ac8fe5d06886fcf9a8526d06e862488185531dd96df3da60460f8cf95566d18f5420874e9e6184eaeb19278e87cf42b4474b5d8f00e2ccaf87012a924bfb619d6948e7acc1a160d9e42c6408b8933c47967224a046831904d9b38a59d8fc8038d5ebc5c982181ed10f7a3994c0057b4d1e9560642e3264ae98c468d923c12ea356280630706f7ca5d696f5ddb7e498caaf397d6689cd38c65c7d96ea5630672bbb8a24d977abf3755ad0eea302f147a862dff0f4cb226ac91e74102a2061ad9842d7e70cfbf8338847b4359b709d5cdcd63ee65e4746940d2c68f259b827aeba4de310c7c6c0ea13696f000e7040a6aad1469ad7c20b4acab5211619dd6b5f41d4705f495fc766b4b6eaf0d23cc87bdc430d8a8a1f2dd3407951091285b5baac534333b8144db2122101a4904c669a90a7d8a7a9a02d95deda4f678e3ac449ed7092db11eab41db466ba97103bd9f39d23802fbdd0c44a928c21605aa89ddf2448686246d224f3e8c80b7690d9a2edaa4a399226e4f17e1709055ba7ed6dcf1af9fff2cf996295271124cc25a8808abde088040deae5ea4fa313e2034c741c628725e9ca8c54a1caca1d8907baf6607dcc1180e53b0bbcde0624b2fcf24ff3cc728259885ccfa1f0a4dabc8196c9a3a3df2bdc5901b19f1918d48adf884d9c0065dcbac882f6d32de42188333ca3ca6ed649299186a070438b651c540602d027dd80bad08e912646887269af9d16da00ee49bb14b674703e36f5f24a4a37c9f8206f23099341943903815ea213ad59ee48496bae3e54a9437438eb31ed0ce258f7c0c002dabefd87ce8fbbb4d33719fc8e432b85e1979a161286236de64ca3a01d19508834cdbde2e4f93848cce12f54775631c03aac8539e84504cbf7ab3241cac188208879ec69203093d36730120656477f03b266022c284bb708111a2df3f6c834d5bf5bbfce7c172c9a9678bbb2e4bbd6204da5698b7e447751f43b2f366991db02fd59dccc584fc983026d8d1251d2f687cac16e4ac51da3d052c57d09dbd56c5cc88e6775a00eb232c411184b49e3433495cbbd2fab7b0bee63a3df75f90b12a13d8a25cb147a182f454dbb3307ce8585f2f96a34caa89c9a113aaf1ce8d556a71cfa0cb7f27c9172d7a714a02706bd7a40375ec091f5db16c9b26797d15911226f286802b284475b7283b7b3af92a8821e1579b2b8d49989103278fe6cdd9c8b4d485c40f1035850265218f6bda7937fb6081e2733fe1bbe0e779d72a7bb1e561deccea64b9cd55132823bda2a727b284e1e58b6a897bece97b12d92a9316969b7c02a68d6cf5be2e214a7417416860599f9ee3bffdc71c52875acf41b56f2a845319e2196f4e54104e1d5797ffbb8cff46b60e5c1a3e7b6e0d188870254a29fea6fe88f6f81335c60dd735d81dfe35732a2ce0a999201feb6e083af6123addf994786874d2482b6d4c4119b9779e05dacfa582bffc7770a6f490a2dc56156d245a4fa0f1f773a3353b4ee7e48b53e6868bc13159c7d5c19c073b77a7ce1df4061135532f22a3917ba84114de0fafa97d2ef6bf377ded84d6e42bb95445a633723446c0235127436affa33674827f242ffcd868346f34d9297f04a3955e0a136c14a4111a892902f6b5865d5cc03594cbab73032ef26cec26e24eb33aaea8545d74ba61736544c9205b1adbbe5d4b74b0151e63cfefa3d422f85c4b46ad4aecad347dcc33528153eb657da145a5d273d54da7b86769bc0dcfc4723a04af81c3149d0c4912665775ee702e7eece816854f5ec8c10cb169954668ed16a25b6a592a2e2613a11b62ca8776293685b3743eb7502c304dbc47686f2040a7b2d627cddb779b6b06bb94a8977fc5b6c00bbe921a3b3efbf2cc3578cf8c0ceba53a511f6e6d021c3244eb0103ad8bef16dc026650c1e42f0bdfe089ccb8a0a0a49039c3821f8aa707d9ffe1d8b1985c363c9d066208d8926bad1bc95614f071c4c9edf1f3d0c85890fd8662539ac907140135ae17e101ad31783a969d1d2f0373edd35c86522c9e2c72682414615d88ac6536c936b510e5eebdfed6cd48eb01a99725004935d92e740475a6394488c725c0e5464d2e17f10b140e613b653da71cf68a3352a1370b7135becf36f28114e12b6206a5fa2976d28e5241f001495811027eb2025105562e027097b690dc05580abbc4f8c812e5106938b552e1466aebf5def992d133459f9b1158b68c77d8a76e6327149286f885443602b5af0735dc0a34bc3818c335f30501fb86a6c2e409a370c4499a4eabb55363d66f0ce8820151b9fcfac9295802540b4ed60dd259184395139227a149a47e4aa5d5695474b24baac261b1a8ca89de505105a5fbd5fd17af737db501212065bf23698e1271d531f53bbf4c3530cfd40ab53fdf310e122397508a7c11641b19f63e09401ab2ce5398a8fe7c753337160068d6707e5f8328bc54fc229e0e9da9dd9e253de71d2530d4515bf140327a35160417c1c29967528a56dfc5a566fdde21e4b184a5bcc38980bf7a605b9ddc1758729d0bdc07b55d772ec721b5d445d1d6939012dc23b2a2f668f97695453792bc241acf828b0fbe68b44639899aaf5ba8e01c29c67c88283177c521db985eddba2572e32df31df390831b01d9cfe75c9a476374bc643f74fc9af270aef0c7171eeb4d98426e36768f714c27f9761549bc7b6e17b585304011718b2e92a7053826e1259b20147f71dec4fd9fad9b96bf571fdd1191a10f4e361de180d134650b66c3d1f57e284dd79846fda47c4110b05ed66edf80d69e4ce6196f1523183d1afbcff0a29c50ee6b5afbb0d60fe1e053df577cc6e24328701ab025c57a2e0c240b3139ee45fc1f5bdeeb325c9f72abb5cbb32147c536873aae10a80c63d1d8660336460f0d5221f953b7758a464a5bdaee25bb880d859edb5ec164a14f29d8bb770fd718da01e398e843971068a15945f4f88957769f819af1bb557e44fbcf6e2aded39e3ea8a7ea2ed771ef97ad26b11eab26bb3c3ff69ca593d5215707d157f451d84079146ffb38f5630555bf59ffcc70cc94032e63146f22427f6c981126a17307e6ef5df394682503112718ec3b3bdc902cd1fd1eb42e17dcc0d5a0a098badec5a0f59a447f1380b82f2b8687c9e2d5cfb977807a07d4920f26fc7e951cfe35e440399819345f7941105ec79787c0d13945164e9c982ebbad59a099bf30a4e5fd789bdf5ad8e4976527e69a94cb4874c04b601a2d15979e37688c6e46b56b0a925355d8591f8a398db9707febcfa50c7661c1dba6baa25134eabe7d605b43c4953ae890ae5a305ae303afedd2b6599c4dbf360031b7e94435d843e3d66f4a0cb94cf1def10cf1d180fbe442d9f152dc63785a013228aaa937cd8c74c47e24bcb602c3f29c6dcb6db48af59dd8a7ea8463b4632cb76563326cf84a8d511524e6404f1f13ecccc9b65bcc1a1bf4ba06be9cce627785250b2d46dea986f5a761aebfbe20eef0af374918b68fbcfd3ae01d528204350e401a06f0661ff39da6b4306e1227adf60a7820b9089d12c851976d4c9ac56ad92aa5eba8d4b86400be69e56c5a5996c07a5d2b5b5af43758174f82f68e19ab2e91f5c517365b4ca6fa8f196a3f74adf2c65b9442b4a99d1fa48bd9ea1229f3244039f94eb1d2ad9ae69f95ae12b1b04600b5532843cb9ed140b3c08a777d1101c80a55205e32bb12dde8938b92bb555c10a21ca0d44aee98a2236c547f827918a01d99dde4ccbca8dc2799eb70cb7cfb86df1f347d18e74eb3a3df44c38861cdfa2f300e04b3ce5850b7c29c3eb646c4a0a9fb43d49aa3d3460dad3eb6efa1aede871e34a0c7e98a1e98d95cda770a62b4fc7d1cde8ccf3814528769fbfd178b96420d6b6fbe6113f18bb85dcb97743047367d0b462578f3691781c472418ac2662cbba026a1ae386ac49f543cf7b9fe4150a9fccfeca5a03b9af9123d57784aee9239eb30fb95d012f61522ec295d2b4112adf543bce31589d05fd2e1bfeeb4c6586abb3f323eb91dd96f1a23ab432884b97a0aad796a355ab7d8dbc5614e4874bb62adc9dc8bcf7526b1382657d8e9e65f6f7c06f9c6875b52a9deebade96af3aeda842d4291a303acb6bfa957dc98a3d9ab534d63b78c4de99dfaad4b71369dd8130af2fb7943927738192d5436bcfd551233bef28685b2ec0481d33fe7feade4ded386b771131d53c7f93094e0ae9faf081a18e3a1dbddfbfb52b7dca9330c5d344ba952514d5cd0098a2dee99855603f697600c9708fe75ef6cc1f84ed99479a27555d3778e175057d0e3852e578b1c8887ba4295683e28616db7b47cde0a6e9787a556e24c01e959b8332c47278238aaf07becf8d0b13048972722379e4547021415365989cab93f71fa8eb5f82de712735851fb90518b260ae08d846ecd6f614fc31179289e402432355c21c9a5a016bda10134a31ff71c3f52d1856adeac77a6d7529fc01674bce852999fafc687f18f2dca62352fdc97c9e99d7b1cd19d275c26fbfd9e2be397b0ac5d9271ecf10056d691ccb9f75202b0973e56fec7537571667a04636d4578963d289bf8a1ca85b21e7450133789a7467ba9ad81cb388dece6d58b7d0276e66c1e33d72f132c91b26391a104f13c15cd128fbb94b48612fb4b"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000011c0)=0x2) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x24}, 0x10) (async) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) write$9p(r3, &(0x7f0000001400)=';', 0x1) (async) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000001140)={0x2, &(0x7f0000001100)=[{0xe, 0x4, 0xf9, 0x6}, {0x3, 0x0, 0xff, 0x7}]}) (async) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000001200)={0x1, 0xa4, "58086ed108e16a533a46363205599cefde7e5690d8d9e14cbddac05618794e0602ff4930d54a53c84356352bff4189c37fe020c2e82893ef3a414a7ba16a0412059fb34ca7a39591382600602856fcdd002eb3a8911a7e5d7a45acad63cfb07b39d41ad29416e580743581e119eca672240f29aa46984f5bca89cb95eff8e50a355a83c30a982d8a0d0c42ff61a206f78c72bfe9f967b9e96c95b975746ca862938837ee"}) (async) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000100)={{r0}, "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"}) (async) 23:01:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6a030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5c020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:35 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x17050000}, [{}]}, 0xfdef) 23:01:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6c000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:35 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x17ba0000}, [{}]}, 0xfdef) 23:01:35 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1fa90000}, [{}]}, 0xfdef) 23:01:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:35 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x27980000}, [{}]}, 0xfdef) [ 401.865832][T19399] tun1: tun_chr_ioctl cmd 1074025677 [ 401.872722][T19399] tun1: linktype set to 513 [ 401.951437][T19399] tun1: tun_chr_ioctl cmd 3221513862 [ 402.250620][T19422] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 402.295755][T19422] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:35 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7a000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x60000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:35 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2f870000}, [{}]}, 0xfdef) 23:01:35 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) r2 = dup2(r0, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x698a21e2, 0x0, 0x4, 0x20, r1, 0x83, '\x00', 0x0, r2, 0x3, 0x0, 0x5, 0xb}, 0x48) 23:01:35 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:35 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x37760000}, [{}]}, 0xfdef) 23:01:35 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3f650000}, [{}]}, 0xfdef) 23:01:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 402.516163][T19431] tun1: tun_chr_ioctl cmd 1074025677 23:01:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x64000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 402.537962][T19431] tun1: linktype set to 519 23:01:36 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x40000000}, [{}]}, 0xfdef) 23:01:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x65580000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 402.887859][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 402.948747][T19450] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:36 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x81ffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:36 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:36 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) r2 = dup2(r0, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x698a21e2, 0x0, 0x4, 0x20, r1, 0x83, '\x00', 0x0, r2, 0x3, 0x0, 0x5, 0xb}, 0x48) 23:01:36 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x47540000}, [{}]}, 0xfdef) 23:01:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x68000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:36 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4f430000}, [{}]}, 0xfdef) 23:01:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88470000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6a010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:36 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4ff80000}, [{}]}, 0xfdef) 23:01:36 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x57320000}, [{}]}, 0xfdef) 23:01:36 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x57e70000}, [{}]}, 0xfdef) [ 403.320091][T19466] tun1: tun_chr_ioctl cmd 1074025677 [ 403.379159][T19466] tun1: linktype set to 519 [ 403.614866][T19484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 403.665710][T19484] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:37 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:37 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5f210000}, [{}]}, 0xfdef) 23:01:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88480000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x6c000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) write$9p(r1, &(0x7f0000001400)=';', 0x1) r2 = dup2(r0, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x698a21e2, 0x0, 0x4, 0x20, r1, 0x83, '\x00', 0x0, r2, 0x3, 0x0, 0x5, 0xb}, 0x48) 23:01:37 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:37 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5fd60000}, [{}]}, 0xfdef) 23:01:37 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x60000000}, [{}]}, 0xfdef) [ 403.948684][T19496] tun1: tun_chr_ioctl cmd 1074025677 [ 403.955822][T19496] tun1: linktype set to 519 23:01:37 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88a8ffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:37 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x67100000}, [{}]}, 0xfdef) [ 404.229568][T19514] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 404.301170][T19514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:37 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:37 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x4, 0x6, 0x1, 0x8, 0x7}, @ipv6=@icmpv6={0x0, 0x6, "e39265", 0x369, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0xf0, 0x10, 0x2, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}, @hopopts={0x9e, 0xb, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x7f, 0x3, [0xf5, 0x3ec6ade3]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x9, 0x25, "910221a3a5b708e8b0625670e797c3142b6b1e796e4935bbebe06a79e2cabd2190cdee1b65"}, @ra={0x5, 0x2, 0x9736}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0xc1}]}, @fragment={0x29, 0x0, 0x2, 0x1, 0x0, 0x15, 0x64}], @param_prob={0x4, 0x1, 0x0, 0x8, {0x4, 0x6, "499f80", 0x7, 0x84, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x32, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x1}]}, @dstopts={0x3b, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xc}}, @enc_lim={0x4, 0x1, 0x1}, @pad1]}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@empty, @empty]}, @hopopts={0x33, 0xa, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0x5, 0x3, [0x0, 0xa30, 0x3, 0xffffffff, 0x80000000, 0xb41d, 0xffffffff7fffffff, 0x3, 0x4b]}}]}, @hopopts={0x3c, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x7}, @pad1, @jumbo, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x85}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x9e}]}, @dstopts={0x2f, 0x26, '\x00', [@jumbo={0xc2, 0x4, 0x80000000}, @generic={0x2, 0x7d, "1b7aaaedbb9ed7003fb2c614ea594449443073467d1c93aaf93a7c556ea68cda25fa612f53a902db8ae26f19271dbb412919a8801847aa8429f6c9b64b51ba3f9e9bdf085e816a905d111582b95c58dffa03b9a545dbb08e9c60b43818afa03612c2b114bf6c3775d7c0a6e769ea8b10563f8a13878f4d54a3cdaf3c24"}, @generic={0x1, 0x2f, "41eaa7515fafeef8eb21de0bae7d8669bb5b416600d6d8879d5add7383e68c2bbbdf78fd360a7ab2ebd8039965da6f"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x80, 0x9, [0x40, 0x8]}}, @calipso={0x7, 0x50, {0x0, 0x12, 0xc6, 0xff01, [0xaf1, 0x5, 0x6, 0x3, 0x2000000000000000, 0x2, 0xd74, 0x5, 0x7928]}}]}], "d3b39379eb5e27e796"}}}}}, 0x39b) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'xfrm0\x00', 0x200}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r2, &(0x7f0000001400)=';', 0x1) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x1, 0x0, 0x9, 0x92b9}, {0x5, 0x81, 0x4}, {0x8001, 0x4, 0x7}, {0x6, 0x93, 0x5, 0x101}, {0x7ff, 0x4, 0xc9, 0x401}, {0xfffd, 0x8, 0x1, 0x1}, {0x1f, 0x8, 0x1, 0x20}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x80800) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000580)) 23:01:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8a010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:37 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x67c50000}, [{}]}, 0xfdef) 23:01:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7a000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:37 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:37 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6fb40000}, [{}]}, 0xfdef) 23:01:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8e020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 404.551683][T19522] tun1: tun_chr_ioctl cmd 1074025677 23:01:38 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x77a30000}, [{}]}, 0xfdef) [ 404.577081][T19522] tun1: linktype set to 513 23:01:38 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7f920000}, [{}]}, 0xfdef) 23:01:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7a020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:38 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x87000000}, [{}]}, 0xfdef) [ 404.900645][T19546] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 404.914371][T19546] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:38 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:38 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x87810000}, [{}]}, 0xfdef) 23:01:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8e030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x4, 0x6, 0x1, 0x8, 0x7}, @ipv6=@icmpv6={0x0, 0x6, "e39265", 0x369, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0xf0, 0x10, 0x2, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}, @hopopts={0x9e, 0xb, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x7f, 0x3, [0xf5, 0x3ec6ade3]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x9, 0x25, "910221a3a5b708e8b0625670e797c3142b6b1e796e4935bbebe06a79e2cabd2190cdee1b65"}, @ra={0x5, 0x2, 0x9736}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0xc1}]}, @fragment={0x29, 0x0, 0x2, 0x1, 0x0, 0x15, 0x64}], @param_prob={0x4, 0x1, 0x0, 0x8, {0x4, 0x6, "499f80", 0x7, 0x84, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x32, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x1}]}, @dstopts={0x3b, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xc}}, @enc_lim={0x4, 0x1, 0x1}, @pad1]}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@empty, @empty]}, @hopopts={0x33, 0xa, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0x5, 0x3, [0x0, 0xa30, 0x3, 0xffffffff, 0x80000000, 0xb41d, 0xffffffff7fffffff, 0x3, 0x4b]}}]}, @hopopts={0x3c, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x7}, @pad1, @jumbo, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x85}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x9e}]}, @dstopts={0x2f, 0x26, '\x00', [@jumbo={0xc2, 0x4, 0x80000000}, @generic={0x2, 0x7d, "1b7aaaedbb9ed7003fb2c614ea594449443073467d1c93aaf93a7c556ea68cda25fa612f53a902db8ae26f19271dbb412919a8801847aa8429f6c9b64b51ba3f9e9bdf085e816a905d111582b95c58dffa03b9a545dbb08e9c60b43818afa03612c2b114bf6c3775d7c0a6e769ea8b10563f8a13878f4d54a3cdaf3c24"}, @generic={0x1, 0x2f, "41eaa7515fafeef8eb21de0bae7d8669bb5b416600d6d8879d5add7383e68c2bbbdf78fd360a7ab2ebd8039965da6f"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x80, 0x9, [0x40, 0x8]}}, @calipso={0x7, 0x50, {0x0, 0x12, 0xc6, 0xff01, [0xaf1, 0x5, 0x6, 0x3, 0x2000000000000000, 0x2, 0xd74, 0x5, 0x7928]}}]}], "d3b39379eb5e27e796"}}}}}, 0x39b) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'xfrm0\x00', 0x200}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r2, &(0x7f0000001400)=';', 0x1) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x1, 0x0, 0x9, 0x92b9}, {0x5, 0x81, 0x4}, {0x8001, 0x4, 0x7}, {0x6, 0x93, 0x5, 0x101}, {0x7ff, 0x4, 0xc9, 0x401}, {0xfffd, 0x8, 0x1, 0x1}, {0x1f, 0x8, 0x1, 0x20}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x80800) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000580)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x4, 0x6, 0x1, 0x8, 0x7}, @ipv6=@icmpv6={0x0, 0x6, "e39265", 0x369, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0xf0, 0x10, 0x2, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}, @hopopts={0x9e, 0xb, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x7f, 0x3, [0xf5, 0x3ec6ade3]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x9, 0x25, "910221a3a5b708e8b0625670e797c3142b6b1e796e4935bbebe06a79e2cabd2190cdee1b65"}, @ra={0x5, 0x2, 0x9736}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0xc1}]}, @fragment={0x29, 0x0, 0x2, 0x1, 0x0, 0x15, 0x64}], @param_prob={0x4, 0x1, 0x0, 0x8, {0x4, 0x6, "499f80", 0x7, 0x84, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x32, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x1}]}, @dstopts={0x3b, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xc}}, @enc_lim={0x4, 0x1, 0x1}, @pad1]}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@empty, @empty]}, @hopopts={0x33, 0xa, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0x5, 0x3, [0x0, 0xa30, 0x3, 0xffffffff, 0x80000000, 0xb41d, 0xffffffff7fffffff, 0x3, 0x4b]}}]}, @hopopts={0x3c, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x7}, @pad1, @jumbo, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x85}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x9e}]}, @dstopts={0x2f, 0x26, '\x00', [@jumbo={0xc2, 0x4, 0x80000000}, @generic={0x2, 0x7d, "1b7aaaedbb9ed7003fb2c614ea594449443073467d1c93aaf93a7c556ea68cda25fa612f53a902db8ae26f19271dbb412919a8801847aa8429f6c9b64b51ba3f9e9bdf085e816a905d111582b95c58dffa03b9a545dbb08e9c60b43818afa03612c2b114bf6c3775d7c0a6e769ea8b10563f8a13878f4d54a3cdaf3c24"}, @generic={0x1, 0x2f, "41eaa7515fafeef8eb21de0bae7d8669bb5b416600d6d8879d5add7383e68c2bbbdf78fd360a7ab2ebd8039965da6f"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x80, 0x9, [0x40, 0x8]}}, @calipso={0x7, 0x50, {0x0, 0x12, 0xc6, 0xff01, [0xaf1, 0x5, 0x6, 0x3, 0x2000000000000000, 0x2, 0xd74, 0x5, 0x7928]}}]}], "d3b39379eb5e27e796"}}}}}, 0x39b) (async) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'xfrm0\x00', 0x200}) (async) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) write$9p(r2, &(0x7f0000001400)=';', 0x1) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x1, 0x0, 0x9, 0x92b9}, {0x5, 0x81, 0x4}, {0x8001, 0x4, 0x7}, {0x6, 0x93, 0x5, 0x101}, {0x7ff, 0x4, 0xc9, 0x401}, {0xfffd, 0x8, 0x1, 0x1}, {0x1f, 0x8, 0x1, 0x20}]}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r3) (async) pipe2$watch_queue(&(0x7f00000000c0), 0x80) (async) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) (async) pipe2(&(0x7f0000000540), 0x80800) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000580)) (async) 23:01:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x7c010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:38 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:38 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8dffffff}, [{}]}, 0xfdef) 23:01:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x94010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 405.317780][T19557] tun1: tun_chr_ioctl cmd 1074025677 [ 405.323383][T19557] tun1: linktype set to 513 [ 405.345258][T19560] tun1: tun_chr_ioctl cmd 1074025677 23:01:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x81000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 405.371912][T19560] tun1: linktype set to 513 23:01:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x94030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:38 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) write$tun(r0, &(0x7f0000000180)={@void, @val={0x0, 0x4, 0x6, 0x1, 0x8, 0x7}, @ipv6=@icmpv6={0x0, 0x6, "e39265", 0x369, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@routing={0xf0, 0x10, 0x2, 0x8, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}, @hopopts={0x9e, 0xb, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x7f, 0x3, [0xf5, 0x3ec6ade3]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x9, 0x25, "910221a3a5b708e8b0625670e797c3142b6b1e796e4935bbebe06a79e2cabd2190cdee1b65"}, @ra={0x5, 0x2, 0x9736}, @jumbo={0xc2, 0x4, 0x9}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0xc1}]}, @fragment={0x29, 0x0, 0x2, 0x1, 0x0, 0x15, 0x64}], @param_prob={0x4, 0x1, 0x0, 0x8, {0x4, 0x6, "499f80", 0x7, 0x84, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@hopopts={0x32, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x1}]}, @dstopts={0x3b, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xc}}, @enc_lim={0x4, 0x1, 0x1}, @pad1]}, @routing={0x33, 0x4, 0x2, 0x4, 0x0, [@empty, @empty]}, @hopopts={0x33, 0xa, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x1, 0x12, 0x5, 0x3, [0x0, 0xa30, 0x3, 0xffffffff, 0x80000000, 0xb41d, 0xffffffff7fffffff, 0x3, 0x4b]}}]}, @hopopts={0x3c, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x7}, @pad1, @jumbo, @jumbo={0xc2, 0x4, 0x1}, @enc_lim={0x4, 0x1, 0x85}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x9e}]}, @dstopts={0x2f, 0x26, '\x00', [@jumbo={0xc2, 0x4, 0x80000000}, @generic={0x2, 0x7d, "1b7aaaedbb9ed7003fb2c614ea594449443073467d1c93aaf93a7c556ea68cda25fa612f53a902db8ae26f19271dbb412919a8801847aa8429f6c9b64b51ba3f9e9bdf085e816a905d111582b95c58dffa03b9a545dbb08e9c60b43818afa03612c2b114bf6c3775d7c0a6e769ea8b10563f8a13878f4d54a3cdaf3c24"}, @generic={0x1, 0x2f, "41eaa7515fafeef8eb21de0bae7d8669bb5b416600d6d8879d5add7383e68c2bbbdf78fd360a7ab2ebd8039965da6f"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x80, 0x9, [0x40, 0x8]}}, @calipso={0x7, 0x50, {0x0, 0x12, 0xc6, 0xff01, [0xaf1, 0x5, 0x6, 0x3, 0x2000000000000000, 0x2, 0xd74, 0x5, 0x7928]}}]}], "d3b39379eb5e27e796"}}}}}, 0x39b) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'xfrm0\x00', 0x200}) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r2, &(0x7f0000001400)=';', 0x1) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x1, 0x0, 0x9, 0x92b9}, {0x5, 0x81, 0x4}, {0x8001, 0x4, 0x7}, {0x6, 0x93, 0x5, 0x101}, {0x7ff, 0x4, 0xc9, 0x401}, {0xfffd, 0x8, 0x1, 0x1}, {0x1f, 0x8, 0x1, 0x20}]}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) (async) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) (async) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x80800) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f0000000580)) 23:01:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x81ffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 405.512920][T19561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 405.603679][T19561] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:39 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9a000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:39 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8f700000}, [{}]}, 0xfdef) 23:01:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x85020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:39 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x4200}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x201) 23:01:39 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x975f0000}, [{}]}, 0xfdef) 23:01:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9c020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88470000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:39 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x97ffffff}, [{}]}, 0xfdef) 23:01:39 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x9f4e0000}, [{}]}, 0xfdef) 23:01:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x4200}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x201) [ 406.113201][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 406.198097][T19610] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:39 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xac000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:39 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88480000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:39 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa73d0000}, [{}]}, 0xfdef) 23:01:39 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x4200}) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (rerun: 64) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x201) 23:01:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x88a8ffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:39 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa7f20000}, [{}]}, 0xfdef) 23:01:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x8e030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb4020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:40 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa8050000}, [{}]}, 0xfdef) [ 406.705923][T19646] tun1: tun_chr_ioctl cmd 1074025677 [ 406.717239][T19646] tun1: linktype set to 513 [ 406.730665][T19639] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 406.894817][T19639] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:40 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb80a0000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:40 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:40 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xaf2c0000}, [{}]}, 0xfdef) 23:01:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x94030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xbc020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:40 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xafe10000}, [{}]}, 0xfdef) 23:01:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9a000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 407.125402][T19666] tun1: tun_chr_ioctl cmd 1074025677 [ 407.133466][T19666] tun1: linktype set to 513 23:01:40 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async, rerun: 32) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) [ 407.169152][T19669] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x9c020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc3ffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 407.250564][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.257949][T19677] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 407.285157][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.295556][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.309099][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.314623][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.325254][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.333966][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.344974][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.353528][T19677] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 407.367585][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.373051][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.384304][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.391343][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.398194][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.403663][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.411731][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.417778][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.463799][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.472337][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.481138][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.491030][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.497326][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.502782][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.514782][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.530463][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.539223][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.558195][T19680] tun1: tun_chr_ioctl cmd 1074025673 23:01:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd0030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:41 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb71b0000}, [{}]}, 0xfdef) [ 407.567703][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.581941][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.592230][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.602168][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.623357][T19680] tun1: tun_chr_ioctl cmd 1074025673 [ 407.638088][T19680] tun1: tun_chr_ioctl cmd 1074025673 23:01:41 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xac000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:41 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd4020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r1 = open(&(0x7f0000000080)='./file1\x00', 0x4088c7, 0x3ce47c9a4b8a4c9e) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x2000}) write$9p(r1, &(0x7f0000001400)=';', 0x1) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x7f, 0xd5, 0x7, 0x40, 0x0, 0x2, 0x13000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x6, 0x1}, 0x80004, 0xffffffffffffffff, 0x3, 0x6, 0x14, 0x2, 0x8000, 0x0, 0x200008, 0x0, 0x1}, 0xffffffffffffffff, 0xe, r1, 0x0) 23:01:41 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb7d00000}, [{}]}, 0xfdef) 23:01:41 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xb80b0000}, [{}]}, 0xfdef) 23:01:41 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xbf0a0000}, [{}]}, 0xfdef) [ 408.071889][T19700] tun1: tun_chr_ioctl cmd 1074025677 [ 408.091361][T19700] tun1: linktype set to 513 23:01:41 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xbfbf0000}, [{}]}, 0xfdef) 23:01:41 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xc7ae0000}, [{}]}, 0xfdef) 23:01:41 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcf9d0000}, [{}]}, 0xfdef) 23:01:41 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) r1 = open(&(0x7f0000000080)='./file1\x00', 0x4088c7, 0x3ce47c9a4b8a4c9e) (async) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x2000}) (async) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x7f, 0xd5, 0x7, 0x40, 0x0, 0x2, 0x13000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x6, 0x1}, 0x80004, 0xffffffffffffffff, 0x3, 0x6, 0x14, 0x2, 0x8000, 0x0, 0x200008, 0x0, 0x1}, 0xffffffffffffffff, 0xe, r1, 0x0) [ 408.316520][T19718] tun1: tun_chr_ioctl cmd 1074025677 [ 408.352279][T19718] tun1: linktype set to 513 [ 408.472144][T19724] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 408.487810][T19716] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 408.668813][T19716] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:42 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb4020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:42 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd6000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:42 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xd78c0000}, [{}]}, 0xfdef) 23:01:42 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r1 = open(&(0x7f0000000080)='./file1\x00', 0x4088c7, 0x3ce47c9a4b8a4c9e) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x20) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x2000}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x2000}) write$9p(r1, &(0x7f0000001400)=';', 0x1) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x7f, 0xd5, 0x7, 0x40, 0x0, 0x2, 0x13000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x401, 0x2, @perf_config_ext={0x6, 0x1}, 0x80004, 0xffffffffffffffff, 0x3, 0x6, 0x14, 0x2, 0x8000, 0x0, 0x200008, 0x0, 0x1}, 0xffffffffffffffff, 0xe, r1, 0x0) 23:01:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xb80a0000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:42 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xdc050000}, [{}]}, 0xfdef) 23:01:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd8000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xbc020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 409.200741][T19737] tun1: tun_chr_ioctl cmd 1074025677 [ 409.219310][T19737] tun1: linktype set to 513 23:01:42 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xdf7b0000}, [{}]}, 0xfdef) 23:01:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd8020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 409.494492][T19751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 409.529161][T19748] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:43 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc2030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 409.671751][T19751] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:43 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xe76a0000}, [{}]}, 0xfdef) 23:01:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xdb070000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:43 executing program 4: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0xa, 0x0, @fd_index=0x5, 0x1c4c, 0x0, 0xffff, 0x0, 0x0, {0x0, r3}}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'wlan0\x00', 0x10}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xd4047922f591fe37) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x70100, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x207) 23:01:43 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc3020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:43 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xef590000}, [{}]}, 0xfdef) 23:01:43 executing program 4: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0xa, 0x0, @fd_index=0x5, 0x1c4c, 0x0, 0xffff, 0x0, 0x0, {0x0, r3}}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'wlan0\x00', 0x10}) (async) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xd4047922f591fe37) (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x70100, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x207) 23:01:43 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc3ffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:43 executing program 4: r0 = syz_io_uring_setup(0x73d7, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0xa, 0x0, @fd_index=0x5, 0x1c4c, 0x0, 0xffff, 0x0, 0x0, {0x0, r3}}, 0x40) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'wlan0\x00', 0x10}) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xd4047922f591fe37) (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x70100, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x207) 23:01:43 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xf7480000}, [{}]}, 0xfdef) 23:01:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dummy0\x00', 0x2}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x242141, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x10}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000140)=0x6) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nicvf0\x00', 0x20}) 23:01:43 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xff370000}, [{}]}, 0xfdef) 23:01:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xdc010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:43 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dummy0\x00', 0x2}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x242141, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x10}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000140)=0x6) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nicvf0\x00', 0x20}) 23:01:43 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffec0000}, [{}]}, 0xfdef) [ 410.680995][T19805] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 410.735052][T19804] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 410.826221][T19804] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:44 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:44 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffff8d}, [{}]}, 0xfdef) 23:01:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xdc030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:44 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dummy0\x00', 0x2}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x242141, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x10}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'wg2\x00', 0x10}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000140)=0x6) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nicvf0\x00', 0x20}) 23:01:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd4020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:44 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd6000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xde0a0000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:44 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xffffff97}, [{}]}, 0xfdef) 23:01:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xdf0a0000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xd8000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe2000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 411.494953][T19835] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 411.554374][T19835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 411.573692][T19835] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:45 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) r2 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x8001) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x2) write$9p(r1, &(0x7f0000001400)=';', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:45 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0xfdef) 23:01:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xdc010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe2030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:45 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:45 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2}, [{}]}, 0xfdef) 23:01:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe7030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe8020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 412.017679][T19853] tun1: tun_chr_ioctl cmd 1074025677 [ 412.025461][T19853] tun1: linktype set to 513 23:01:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xde030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:45 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) r2 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x8001) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x2) (async) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x2) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) write$9p(r1, &(0x7f0000001400)=';', 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:45 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, [{}]}, 0xfdef) [ 412.324767][T19857] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 412.437587][T19865] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 412.506977][T19857] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:01:46 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:46 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4}, [{}]}, 0xfdef) 23:01:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe8030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) r2 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x8001) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x2) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (rerun: 32) openat$cgroup_ro(r1, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xde0a0000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:46 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xea010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 412.751599][T19883] tun1: tun_chr_ioctl cmd 1074025677 [ 412.759356][T19883] tun1: linktype set to 513 23:01:46 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5}, [{}]}, 0xfdef) 23:01:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'syzkaller0\x00', @local}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xdf0a0000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xea030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 412.890171][T19893] tun1: tun_chr_ioctl cmd 1074025677 [ 412.920533][T19893] tun1: linktype set to 513 23:01:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xeaffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 413.110700][T19902] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:46 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:46 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6}, [{}]}, 0xfdef) 23:01:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xee030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'syzkaller0\x00', @local}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xe2030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:46 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xefffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:46 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7}, [{}]}, 0xfdef) 23:01:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xea010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:46 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8}, [{}]}, 0xfdef) 23:01:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:46 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'syzkaller0\x00', @local}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'syzkaller0\x00', @local}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) [ 413.563051][T19932] tun1: tun_chr_ioctl cmd 1074025677 [ 413.574533][T19932] tun1: linktype set to 513 [ 413.732492][T19943] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:47 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xea030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:47 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x11}, [{}]}, 0xfdef) 23:01:47 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) write$tun(r1, &(0x7f0000000180)={@void, @void, @llc={@llc={0x4, 0xdc, "fba8", "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"}}}, 0xfe) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x101) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x7) 23:01:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf5010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:47 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xeaffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:47 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x60}, [{}]}, 0xfdef) 23:01:47 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x87}, [{}]}, 0xfdef) 23:01:47 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x300}, [{}]}, 0xfdef) [ 414.214925][T19957] tun1: tun_chr_ioctl cmd 1074025677 [ 414.223424][T19957] tun1: linktype set to 513 23:01:47 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x500}, [{}]}, 0xfdef) 23:01:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf8020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 414.369709][T19960] tun1: tun_chr_ioctl cmd 37728 [ 414.378179][T19951] tun1: tun_chr_ioctl cmd 1074025688 [ 414.649412][T19968] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:48 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r6, 0x401) syncfs(r6) ftruncate(r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r8, 0x401) syncfs(r7) ftruncate(r7, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r5, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r6, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:48 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x517}, [{}]}, 0xfdef) 23:01:48 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) write$tun(r1, &(0x7f0000000180)={@void, @void, @llc={@llc={0x4, 0xdc, "fba8", "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"}}}, 0xfe) (async) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x101) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x7) 23:01:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xec000000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf8030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:48 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfa030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:48 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5a8}, [{}]}, 0xfdef) [ 415.108035][T19992] tun1: tun_chr_ioctl cmd 1074025677 [ 415.136610][T19992] tun1: linktype set to 513 23:01:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfc030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xee030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 415.178803][T19989] tun1: tun_chr_ioctl cmd 37728 [ 415.193610][T19983] tun1: tun_chr_ioctl cmd 1074025688 23:01:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfcffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfeffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 415.353953][T19993] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:49 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r6, 0x401) syncfs(r6) ftruncate(r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r8, 0x401) syncfs(r7) ftruncate(r7, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r5, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r6, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:49 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5dc}, [{}]}, 0xfdef) 23:01:49 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) write$tun(r1, &(0x7f0000000180)={@void, @void, @llc={@llc={0x4, 0xdc, "fba8", "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"}}}, 0xfe) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x101) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x7) 23:01:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff7f0000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xefffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:49 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:49 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x600}, [{}]}, 0xfdef) 23:01:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffff0300, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf0020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffa888, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf0ffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:49 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x700}, [{}]}, 0xfdef) [ 416.368784][T20038] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:50 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6ce9d0c000000f65bb789"], 0x28}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r6, 0x401) syncfs(r6) ftruncate(r6, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r8, 0x401) syncfs(r7) ftruncate(r7, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r5, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r6, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:50 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x727}, [{}]}, 0xfdef) 23:01:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a3bd97a31e0cabfdb402f200"/131], 0xfdef) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r2, &(0x7f00000001c0)={0x7, 0x3, 0x1, 0x4}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf2030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:50 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffff81, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf5020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:50 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7dc}, [{}]}, 0xfdef) 23:01:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffc3, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf8010000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 416.865871][T20051] tun1: tun_chr_ioctl cmd 1074025677 23:01:50 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xabf}, [{}]}, 0xfdef) [ 416.899445][T20051] tun1: linktype set to 513 [ 417.081044][T20066] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:50 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffea, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:50 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xbb8}, [{}]}, 0xfdef) 23:01:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xf8020000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:50 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) (async) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a3bd97a31e0cabfdb402f200"/131], 0xfdef) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r2, &(0x7f00000001c0)={0x7, 0x3, 0x1, 0x4}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) [ 417.686990][T20083] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:51 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:51 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf16}, [{}]}, 0xfdef) 23:01:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffef, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a3bd97a31e0cabfdb402f200"/131], 0xfdef) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r2, &(0x7f00000001c0)={0x7, 0x3, 0x1, 0x4}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfa030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:51 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:51 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfcb}, [{}]}, 0xfdef) 23:01:51 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1067}, [{}]}, 0xfdef) 23:01:51 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1100}, [{}]}, 0xfdef) 23:01:51 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x160f}, [{}]}, 0xfdef) 23:01:51 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1705}, [{}]}, 0xfdef) 23:01:51 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x100}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r2 = getpid() pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x80, 0x6, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5a2, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x8c423, 0x9, 0x6, 0x8, 0x7, 0xfd2a, 0x3, 0x0, 0x0, 0x0, 0x6}, r2, 0xc, 0xffffffffffffffff, 0x2) [ 418.550002][T20109] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:52 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfc030000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:52 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x17ba}, [{}]}, 0xfdef) 23:01:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async, rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x100}) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async, rerun: 64) r2 = getpid() (rerun: 64) pidfd_open(r2, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x80, 0x6, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5a2, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x8c423, 0x9, 0x6, 0x8, 0x7, 0xfd2a, 0x3, 0x0, 0x0, 0x0, 0x6}, r2, 0xc, 0xffffffffffffffff, 0x2) 23:01:52 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:52 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1bb7}, [{}]}, 0xfdef) 23:01:52 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x100}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) r2 = getpid() pidfd_open(r2, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x80, 0x6, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x5a2, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x8c423, 0x9, 0x6, 0x8, 0x7, 0xfd2a, 0x3, 0x0, 0x0, 0x0, 0x6}, r2, 0xc, 0xffffffffffffffff, 0x2) 23:01:52 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1fa9}, [{}]}, 0xfdef) 23:01:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffc, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfcffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfeffffff, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 419.575029][T20149] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:53 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffe, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:53 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x215f}, [{}]}, 0xfdef) 23:01:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff7f0000, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30b) 23:01:53 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2707}, [{}]}, 0xfdef) 23:01:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffff0300, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0xf, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 420.134917][T20164] tun1: tun_chr_ioctl cmd 1074025677 [ 420.148131][T20164] tun1: linktype set to 513 23:01:53 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2798}, [{}]}, 0xfdef) 23:01:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x10, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:53 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffa888, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x12, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:53 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30b) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) (async) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30b) (async) 23:01:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffff7f, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:53 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:53 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2caf}, [{}]}, 0xfdef) 23:01:53 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2f87}, [{}]}, 0xfdef) 23:01:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x4a, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:54 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3257}, [{}]}, 0xfdef) 23:01:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x140, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 420.575103][T20190] tun1: tun_chr_ioctl cmd 1074025677 [ 420.615070][T20190] tun1: linktype set to 513 23:01:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffff81, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 420.644636][T20184] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 420.674641][T20203] tun1: tun_chr_ioctl cmd 1074025673 23:01:54 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x438, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:54 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3776}, [{}]}, 0xfdef) 23:01:54 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async, rerun: 64) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async, rerun: 64) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30b) 23:01:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffc3, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:54 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x7e4, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x958, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0xec0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:54 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x37ff}, [{}]}, 0xfdef) 23:01:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x33fe0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:54 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3da7}, [{}]}, 0xfdef) [ 421.383330][T20224] tun1: tun_chr_ioctl cmd 1074025677 [ 421.399939][T20224] tun1: linktype set to 513 [ 421.848966][T20244] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:55 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0xfffffdef, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffea, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:55 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3f65}, [{}]}, 0xfdef) 23:01:55 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x32000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) [ 422.322270][T20256] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:56 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x32000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x2, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:56 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4000}, [{}]}, 0xfdef) 23:01:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffef, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:56 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:56 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x434f}, [{}]}, 0xfdef) 23:01:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x32000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:56 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4754}, [{}]}, 0xfdef) [ 422.685168][T20263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=20263 comm=syz-executor.0 23:01:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x3, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:56 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48f7}, [{}]}, 0xfdef) [ 422.764476][T20278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=20278 comm=syz-executor.0 23:01:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x4, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 422.863166][T20285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=20285 comm=syz-executor.0 [ 422.906919][T20284] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:56 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:56 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4e9f}, [{}]}, 0xfdef) 23:01:56 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'batadv0\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r1, 0x400454cd, 0x33a) 23:01:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x5, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffff0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 423.236984][T20298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=20298 comm=syz-executor.0 23:01:57 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:57 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4f43}, [{}]}, 0xfdef) 23:01:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffc, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000100)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'batadv0\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async, rerun: 64) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async, rerun: 64) ioctl$TUNSETLINK(r1, 0x400454cd, 0x33a) 23:01:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x6, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:57 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:57 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4ff8}, [{}]}, 0xfdef) 23:01:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x7, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 423.755505][T20312] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=20312 comm=syz-executor.0 23:01:57 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5447}, [{}]}, 0xfdef) 23:01:57 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5732}, [{}]}, 0xfdef) 23:01:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x8, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 423.831314][T20321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=20321 comm=syz-executor.0 23:01:57 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x57e7}, [{}]}, 0xfdef) [ 423.912359][T20328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=20328 comm=syz-executor.0 [ 424.088732][T20332] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:57 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x9, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xfffffffe, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:57 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x59ef}, [{}]}, 0xfdef) 23:01:57 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000100)) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'batadv0\x00', 0x2}) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x8) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x33a) [ 424.381152][T20340] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=20340 comm=syz-executor.0 [ 424.628471][T20349] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 424.652280][T20155] ================================================================== [ 424.660463][T20155] BUG: KCSAN: data-race in __mark_inode_dirty / redirty_tail_locked [ 424.668465][T20155] [ 424.670803][T20155] read-write to 0xffff88810a23a708 of 8 bytes by task 14680 on cpu 1: [ 424.679101][T20155] redirty_tail_locked+0x56/0x270 [ 424.684117][T20155] writeback_sb_inodes+0x7b2/0xaa0 [ 424.689230][T20155] wb_writeback+0x23b/0x6c0 [ 424.693735][T20155] wb_workfn+0x1a8/0x8d0 [ 424.698003][T20155] process_one_work+0x3e6/0x750 [ 424.702853][T20155] worker_thread+0x5f2/0xa10 [ 424.707437][T20155] kthread+0x1d7/0x210 [ 424.711500][T20155] ret_from_fork+0x1f/0x30 [ 424.715920][T20155] [ 424.718235][T20155] read to 0xffff88810a23a708 of 8 bytes by task 20155 on cpu 0: [ 424.725945][T20155] __mark_inode_dirty+0x199/0x7d0 [ 424.730975][T20155] mark_buffer_dirty+0x165/0x240 [ 424.735905][T20155] __block_commit_write+0x10a/0x1a0 [ 424.741104][T20155] generic_write_end+0x7f/0x360 [ 424.746043][T20155] ext4_da_write_end+0x4df/0x690 [ 424.750980][T20155] generic_perform_write+0x253/0x3d0 [ 424.756263][T20155] ext4_buffered_write_iter+0x234/0x3e0 [ 424.761817][T20155] ext4_file_write_iter+0xd7/0x10e0 [ 424.767108][T20155] __kernel_write_iter+0x15c/0x380 [ 424.772219][T20155] dump_user_range+0x25d/0x490 [ 424.776980][T20155] elf_core_dump+0x1a73/0x1b90 [ 424.781758][T20155] do_coredump+0x1029/0x1870 [ 424.786347][T20155] get_signal+0xd65/0xff0 [ 424.790679][T20155] arch_do_signal_or_restart+0x89/0x2a0 [ 424.796237][T20155] exit_to_user_mode_loop+0x6f/0xe0 [ 424.801437][T20155] exit_to_user_mode_prepare+0x6c/0xb0 [ 424.806895][T20155] irqentry_exit_to_user_mode+0x9/0x20 [ 424.812361][T20155] irqentry_exit+0x12/0x40 [ 424.816776][T20155] asm_exc_page_fault+0x26/0x30 [ 424.821623][T20155] [ 424.823934][T20155] value changed: 0x0000000000020087 -> 0x0000000000000007 [ 424.831037][T20155] [ 424.833349][T20155] Reported by Kernel Concurrency Sanitizer on: [ 424.839486][T20155] CPU: 0 PID: 20155 Comm: syz-executor.5 Not tainted 6.4.0-rc7-syzkaller-00234-g547cc9be86f4 #0 [ 424.849990][T20155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 424.860045][T20155] ================================================================== 23:01:58 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:58 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5f21}, [{}]}, 0xfdef) 23:01:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0xa, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0xf, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:58 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = open(&(0x7f0000000200)='./file0/file0\x00', 0x418a86, 0x3ce47c9a4b8a4dde) write$9p(r1, &(0x7f0000001400)=';', 0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'batadv0\x00', 0x700}) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000001c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) r3 = fsmount(0xffffffffffffffff, 0x1, 0xa) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1, 0x6, 0x1, 0x6be}, {0x9, 0x2, 0x0, 0x8}]}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:58 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:59 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5f97}, [{}]}, 0xfdef) 23:01:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x10, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0xb, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:59 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5fd6}, [{}]}, 0xfdef) [ 425.588536][T20360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=20360 comm=syz-executor.0 [ 425.611398][T20358] tun1: tun_chr_ioctl cmd 1074025677 23:01:59 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6000}, [{}]}, 0xfdef) [ 425.663229][T20358] tun1: linktype set to 513 [ 425.671050][T20368] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=20368 comm=syz-executor.0 23:01:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0xc, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 425.861596][T20375] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:59 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, 0x0, 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x140, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) r1 = open(&(0x7f0000000200)='./file0/file0\x00', 0x418a86, 0x3ce47c9a4b8a4dde) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'batadv0\x00', 0x700}) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000001c0)) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) r3 = fsmount(0xffffffffffffffff, 0x1, 0xa) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1, 0x6, 0x1, 0x6be}, {0x9, 0x2, 0x0, 0x8}]}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0xd, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:59 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x653f}, [{}]}, 0xfdef) 23:01:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0xe, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x434, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:59 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6710}, [{}]}, 0xfdef) 23:01:59 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:01:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x6c0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 426.167154][T20392] tun1: tun_chr_ioctl cmd 1074025677 [ 426.172646][T20392] tun1: linktype set to 513 23:01:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) r1 = open(&(0x7f0000000200)='./file0/file0\x00', 0x418a86, 0x3ce47c9a4b8a4dde) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'batadv0\x00', 0x700}) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f00000001c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) r3 = fsmount(0xffffffffffffffff, 0x1, 0xa) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x1, 0x6, 0x1, 0x6be}, {0x9, 0x2, 0x0, 0x8}]}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:01:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x7e4, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:59 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r6}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r7 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r7, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:01:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x11, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:59 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x67c5}, [{}]}, 0xfdef) 23:01:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x954, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:59 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6ae7}, [{}]}, 0xfdef) 23:01:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x12, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 426.478829][T20408] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:01:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0xec0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:01:59 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4b0880, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r2, &(0x7f0000001400)=';', 0x1) r3 = pidfd_open(0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file1', [{}], 0xa, "faf6bb173f27dd16d8430d6b612a6f6f88940e25e0845a941c7f30bcd7bb6e47789e3e98f1bbc80c1838c88cbfb20fa6967a459245ae4972e9283f0d9ef6b72e6064d5fd4fdcd40d6c1a0e6151c5ffa9eae6474246ee34b3f957d4949076dbc98c7b0f968912920aeffbbb20f9b11b152e53377b20593b26c6f92ab48c856e99f1b448266016face95d69bca27c34caa0b31050012174832558bf88e4f3c71e59c90f2e5879ac99e5558c3e07139ec7bed30880801d17c8586544f65ead61ccade57a14b6e246bb0ee48511ceada4f0de0d9ddce68b17625b3b9e0fedf81164ee329065cb273a2e98d2faa223e2fd01abef01c"}, 0xff) write$9p(r2, &(0x7f0000000100)="fdc545cf40e6f53b5961300663af8d548b054f0e0801000000000000000e898a0a3e743ae50d6b53f3ca04da64ecef2060", 0x2a) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'macsec0\x00'}) r4 = getpid() r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='cgroup.kill\x00', 0x0, 0x0) pidfd_open(r4, 0x0) pidfd_open(r4, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:02:00 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:02:00 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6fb4}, [{}]}, 0xfdef) 23:02:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x33fe0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4b0880, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r2, &(0x7f0000001400)=';', 0x1) (async) write$9p(r2, &(0x7f0000001400)=';', 0x1) r3 = pidfd_open(0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file1', [{}], 0xa, "faf6bb173f27dd16d8430d6b612a6f6f88940e25e0845a941c7f30bcd7bb6e47789e3e98f1bbc80c1838c88cbfb20fa6967a459245ae4972e9283f0d9ef6b72e6064d5fd4fdcd40d6c1a0e6151c5ffa9eae6474246ee34b3f957d4949076dbc98c7b0f968912920aeffbbb20f9b11b152e53377b20593b26c6f92ab48c856e99f1b448266016face95d69bca27c34caa0b31050012174832558bf88e4f3c71e59c90f2e5879ac99e5558c3e07139ec7bed30880801d17c8586544f65ead61ccade57a14b6e246bb0ee48511ceada4f0de0d9ddce68b17625b3b9e0fedf81164ee329065cb273a2e98d2faa223e2fd01abef01c"}, 0xff) (async) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file1', [{}], 0xa, "faf6bb173f27dd16d8430d6b612a6f6f88940e25e0845a941c7f30bcd7bb6e47789e3e98f1bbc80c1838c88cbfb20fa6967a459245ae4972e9283f0d9ef6b72e6064d5fd4fdcd40d6c1a0e6151c5ffa9eae6474246ee34b3f957d4949076dbc98c7b0f968912920aeffbbb20f9b11b152e53377b20593b26c6f92ab48c856e99f1b448266016face95d69bca27c34caa0b31050012174832558bf88e4f3c71e59c90f2e5879ac99e5558c3e07139ec7bed30880801d17c8586544f65ead61ccade57a14b6e246bb0ee48511ceada4f0de0d9ddce68b17625b3b9e0fedf81164ee329065cb273a2e98d2faa223e2fd01abef01c"}, 0xff) write$9p(r2, &(0x7f0000000100)="fdc545cf40e6f53b5961300663af8d548b054f0e0801000000000000000e898a0a3e743ae50d6b53f3ca04da64ecef2060", 0x2a) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'macsec0\x00'}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'macsec0\x00'}) r4 = getpid() r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='cgroup.kill\x00', 0x0, 0x0) pidfd_open(r4, 0x0) pidfd_open(r4, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) [ 426.818489][T20439] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:02:00 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r6}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r7 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r7, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:02:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x29, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4b0880, 0x0) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r2, &(0x7f0000001400)=';', 0x1) (async) r3 = pidfd_open(0xffffffffffffffff, 0x0) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file1', [{}], 0xa, "faf6bb173f27dd16d8430d6b612a6f6f88940e25e0845a941c7f30bcd7bb6e47789e3e98f1bbc80c1838c88cbfb20fa6967a459245ae4972e9283f0d9ef6b72e6064d5fd4fdcd40d6c1a0e6151c5ffa9eae6474246ee34b3f957d4949076dbc98c7b0f968912920aeffbbb20f9b11b152e53377b20593b26c6f92ab48c856e99f1b448266016face95d69bca27c34caa0b31050012174832558bf88e4f3c71e59c90f2e5879ac99e5558c3e07139ec7bed30880801d17c8586544f65ead61ccade57a14b6e246bb0ee48511ceada4f0de0d9ddce68b17625b3b9e0fedf81164ee329065cb273a2e98d2faa223e2fd01abef01c"}, 0xff) (async) write$9p(r2, &(0x7f0000000100)="fdc545cf40e6f53b5961300663af8d548b054f0e0801000000000000000e898a0a3e743ae50d6b53f3ca04da64ecef2060", 0x2a) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'macsec0\x00'}) (async) r4 = getpid() r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$cgroup_ro(r5, &(0x7f0000000240)='cgroup.kill\x00', 0x0, 0x0) (async) pidfd_open(r4, 0x0) pidfd_open(r4, 0x0) (async) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vxcan1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:02:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0xfffffdef, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:00 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x708f}, [{}]}, 0xfdef) 23:02:00 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7637}, [{}]}, 0xfdef) 23:02:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x7b, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x2, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x7c4, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0xa5, 0x20, 0x7f, 0x0, 0x3, 0x20304, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x108, 0x1, 0x4, 0x8, 0xfff, 0x604a6d4d, 0x1, 0x0, 0x7ff, 0x0, 0x3e36}, 0x0, 0x1, r1, 0x1) 23:02:00 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x77a3}, [{}]}, 0xfdef) 23:02:00 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) [ 427.040899][T20459] tun1: tun_chr_ioctl cmd 1074025677 [ 427.067160][T20459] tun1: linktype set to 513 [ 427.386136][T20470] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:02:01 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='c *:* m\nw'], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r5, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r6}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r5, &(0x7f0000000080), 0x10) r7 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r7, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:02:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x3, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x402, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:01 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7bdf}, [{}]}, 0xfdef) 23:02:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0xa5, 0x20, 0x7f, 0x0, 0x3, 0x20304, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x108, 0x1, 0x4, 0x8, 0xfff, 0x604a6d4d, 0x1, 0x0, 0x7ff, 0x0, 0x3e36}, 0x0, 0x1, r1, 0x1) 23:02:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x404, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x4, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:01 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7f92}, [{}]}, 0xfdef) [ 427.642159][T20482] tun1: tun_chr_ioctl cmd 1074025677 [ 427.654011][T20482] tun1: linktype set to 513 23:02:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:01 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8187}, [{}]}, 0xfdef) [ 427.688129][T20491] selinux_netlink_send: 7 callbacks suppressed [ 427.688158][T20491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=20491 comm=syz-executor.1 23:02:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x5, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:01 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) [ 427.788231][T20496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=20496 comm=syz-executor.1 23:02:01 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, 0x0, 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:02:01 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r1, &(0x7f0000001400)=';', 0x1) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x5, 0xa5, 0x20, 0x7f, 0x0, 0x3, 0x20304, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x108, 0x1, 0x4, 0x8, 0xfff, 0x604a6d4d, 0x1, 0x0, 0x7ff, 0x0, 0x3e36}, 0x0, 0x1, r1, 0x1) 23:02:01 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8700}, [{}]}, 0xfdef) 23:02:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x6, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x406, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 428.020397][T20501] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:02:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x408, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:01 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x872f}, [{}]}, 0xfdef) 23:02:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x7, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 428.082231][T20507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=20507 comm=syz-executor.1 [ 428.108874][T20511] tun1: tun_chr_ioctl cmd 1074025677 23:02:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40a, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:01 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) [ 428.142144][T20511] tun1: linktype set to 513 [ 428.147785][T20518] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=20518 comm=syz-executor.1 23:02:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 428.441443][T20530] netlink: 'syz-executor.5': attribute type 4 has an invalid length. 23:02:02 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, 0x0, 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:02:02 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8781}, [{}]}, 0xfdef) 23:02:02 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:02:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x410, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x8, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:02 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:02:02 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8cd7}, [{}]}, 0xfdef) 23:02:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x411, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x9, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 429.034692][T20536] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=20536 comm=syz-executor.1 [ 429.060670][T20543] tun1: tun_chr_ioctl cmd 1074025677 [ 429.069475][T20543] tun1: linktype set to 513 23:02:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:02 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:02:02 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8f70}, [{}]}, 0xfdef) [ 429.206235][T20554] tun1: tun_chr_ioctl cmd 1074025677 [ 429.214372][T20554] tun1: linktype set to 513 [ 429.221267][T20557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=20557 comm=syz-executor.1 [ 429.268610][T20559] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 429.347390][T20560] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 429.469906][T20560] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:02:03 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, 0x0, 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:02:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x414, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0xa, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:03 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:02:03 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x927f}, [{}]}, 0xfdef) [ 429.758907][T20568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=20568 comm=syz-executor.1 23:02:03 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x42}}}}, [""]}, 0x28}}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44080) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3d}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x24084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r5, 0x400454cd, 0x201) 23:02:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xc00e, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:03 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x975f}, [{}]}, 0xfdef) 23:02:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0xb, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:03 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x9827}, [{}]}, 0xfdef) [ 429.927800][T20579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=20579 comm=syz-executor.1 23:02:03 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) [ 429.975161][T20585] tun1: tun_chr_ioctl cmd 1074025677 [ 430.000014][T20585] tun1: linktype set to 513 23:02:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 430.422885][T20593] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 430.447337][T20588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 430.459678][T20588] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:02:03 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:02:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0xc, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:03 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x42}}}}, [""]}, 0x28}}, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44080) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3d}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x24084) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r5, 0x400454cd, 0x201) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x42}}}}, [""]}, 0x28}}, 0x4) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44080) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3d}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x24084) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xd4047922f591fe37) (async) ioctl$TUNSETLINK(r5, 0x400454cd, 0x201) (async) 23:02:03 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x9dcf}, [{}]}, 0xfdef) 23:02:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:04 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x9f4e}, [{}]}, 0xfdef) 23:02:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0xd, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 430.588180][T20601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=20601 comm=syz-executor.1 [ 430.614365][T20602] tun1: tun_chr_ioctl cmd 1074025677 [ 430.619981][T20602] tun1: linktype set to 513 23:02:04 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x42}}}}, [""]}, 0x28}}, 0x4) (async, rerun: 32) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44080) (async, rerun: 32) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3d}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x24084) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) (async) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xd4047922f591fe37) ioctl$TUNSETLINK(r5, 0x400454cd, 0x201) 23:02:04 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xa377}, [{}]}, 0xfdef) 23:02:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:04 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:02:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 430.837543][T20620] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=20620 comm=syz-executor.1 [ 431.052885][T20631] netlink: 'syz-executor.5': attribute type 4 has an invalid length. [ 431.072156][T20631] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 431.115767][T20631] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 23:02:04 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2bd7db91ead0de101ebfe79498c1048e45cf8bf6e454a5d3141487f1f2159", 0xa5, 0x0, &(0x7f00000004c0)="aa4a9d8f54ce56dd92a79fe8a353023ed359ed2b56e3e46155a2d3d1798bf332338c4f03a7912ecb4268e85ddbc64ab211de83474d9351e601406bf89186cd1c307d190fd4b31839a531dc4fbca5a8e954a62a1953eeb86d3fe817d92df0d3178d9b4363470b5e364ca5934b206acb5eb0da905903ecbf0a6a5f76a79609d0ab500348b12c139aa1fc136bc861e9c77793486eccc9cc7f7f07000ff6b21a6daba5910ab517"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)={[{0x2b, 'rlimit'}, {0x2b, 'devices'}, {0x2d, 'devices'}]}, 0x1a) connect$can_bcm(r6, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x5, 0x80, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "272674b5dd077a0b"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f0000000740)={&(0x7f0000000600)={0x1d, r7}, 0x10, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="05"], 0x48}}, 0x20000000) sendmsg$can_bcm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x6, 0x0, 0x0, {0x77359400}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ffeca1bbe86667ac"}}, 0x48}}, 0x0) connect$can_bcm(r6, &(0x7f0000000080), 0x10) r8 = open(&(0x7f0000000080)='./file0\x00', 0x80c5, 0x3ce47c9a4b8a4c9e) write$9p(r8, &(0x7f0000001400)=';', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x6, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9f}, [@alu={0x4, 0x1, 0xa, 0x5, 0x9, 0x6, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, &(0x7f00000007c0), 0x0, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x8, 0x8, 0x8}, 0x10}, 0x80) syz_clone(0x68000600, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 23:02:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x5, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:04 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x1}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd4047922f591fe37) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x4a, 0x5, 0x8, 0x3, @mcast1, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x20, 0x9, 0x1f}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_deladdr={0x90, 0x15, 0x300, 0x70bd28, 0x25dfdbfe, {0xa, 0x78, 0x21, 0xfd, r1}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x3ff}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x10000, 0x53, 0x3}}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_FLAGS={0x8, 0x8, 0x300}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x90}}, 0x20008000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x201) 23:02:04 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xa73d}, [{}]}, 0xfdef) 23:02:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0xe, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x11, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:04 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xa7f2}, [{}]}, 0xfdef) 23:02:04 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xa805}, [{}]}, 0xfdef) 23:02:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x403, 0x6, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) 23:02:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x3c, 0x12, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0xba01}, 0x0) [ 431.487865][T20649] tun1: tun_chr_ioctl cmd 1074025677 [ 431.534208][T20649] tun1: linktype set to 513 23:02:05 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r1, 0x401) syncfs(r1) ftruncate(r1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @dev={0xac, 0x14, 0x14, 0x2b}}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e000000200000300000000ac1414bb00"/28], 0x1c) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000007e00000008000100000000006774b373f5f9ff75efc6"], 0x28}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001540)=[{&(0x7f0000000200)=""/95, 0x5f}, {0x0}, {&(0x7f0000000280)=""/217, 0xd9}], 0x3, &(0x7f0000001780), 0x0, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r7, 0x401) syncfs(r7) ftruncate(r7, 0x0) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) ftruncate(r9, 0x401) syncfs(r8) ftruncate(r8, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2abd7000fddbdf253100000008005200b8d009c40120e0bb47cfd4ee195800239bdc9dead30788e29c3308a88b77b4cc0007b2cfe9d90000f85406a4fef8f28f37028c98f5435cc365863ad5a333f942bb9efbe47abcb92081a9566999ba2c48340ea4a932347c2df5c7b031a10984657a1f9270cbc12f", @ANYRES32=r6, @ANYBLOB="0800db00", @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r7, @ANYBLOB="0800db9babbe3e89dc0770edcf4f5c5e798e277f9fb811d981fc974194993cf924a19c53d81c3f965eb7fb182666bc264469e3d73470518b713f50e818879b4a6b138af3934d68d0dc687b503fec5f5100b6082ddf820637990a9ecc1ed67b14b053e8b879ee99b0fc8c857aab74828cc135cc98ea3403b549b6b20e11", @ANYRES32=r8, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x800) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @loopback, @empty}, 0xc) 23:02:05 executing program 3: set_mempolicy(0x3, &(0x7f0000000100)=0x201, 0x7fff) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote}, 0x1c) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xa91f}, [{}]}, 0xfdef) 23:02:05 executing program 2: socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000e9ffffff0000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb1f1"], 0x20000600}}, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[], 0x9) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x6, 0x400, 0x3f, {0x0, 0xea60}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x3, 0x3, 0x0, 0x0, "e95c2f7f2ee0dfe452a8b2ff2ff848a5c070d77ee8334ef1c63b89e3c27c8758d428e7a6983f7fc9a9430a9961147c1d2256298100d5ebcb2f5ef61b09c7f082"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x40080d0) ioctl$FICLONE(r3, 0x40049409, r2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000002c0)={0x1, 0x3, 0x1000, 0x8d, &(0x7f0000000380)="b397ae37810cac4cc40058f0505dc247e143908146e7b7b578cd013e35dec1b2de8be743316261109f33b207ba4f4d458c6f04196230f1f8318d2ca2422baf2f5dbf19679619cc319c85e837a68f5e67e6f542264655c4e7fe8255543bebe2e59d323816f5c82ccf515c1dd6852fc2