x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000040)) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000080)=0xfdca) 07:09:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0189436, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:09:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x4}}) 07:09:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc020660b, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:09:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2400c1dfe2980000290000f8310000002e7c3e447e5972b6e5251e896c2bfe80", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) 07:09:45 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000140)=""/240) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff030000ff0f000009000000000000000500000000000000000000000000000000fcffffffffffff00000000000000000000000000000000000000000000000009000000080000000200000000000000060000000000000000000100000000002000"/576]) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x2000, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x1000, 0x4, 0x8, 0x3, 0x1, 0x8}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5453, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x80, 0x8003, 0xffff, 0x2}}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000000)=0x1) 07:09:45 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:45 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x5}}) 07:09:45 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0xc0505405, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:09:45 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x6}}) 07:09:46 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x900, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:09:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x3, {0x2, 0x0, 0x0, 0x8001}}) 07:09:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) 07:09:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x7}}) 07:09:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x4, {0x2, 0x0, 0x0, 0x8001}}) 07:09:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_MASTER={0x8, 0xa, r11}]}, 0x28}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x8}}) 07:09:46 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x2) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x3ea, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000004335200000000000bb", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) 07:09:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x5, {0x2, 0x0, 0x0, 0x8001}}) 07:09:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:46 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x3355, 0x27, 0x0, 0x9, 0x7, "9e91df23d8c14599"}) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)) 07:09:46 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x6, {0x2, 0x0, 0x0, 0x8001}}) 07:09:46 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0xe}}) 07:09:46 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000380)) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="000000fe8000000000000000000000000000bb755388245518357b7a5da9896b651c4f4d9f82ed794a98b15aa8024b3ff4b125059e58facd083768bb36cb437a6a2a7d1f23293659385332759735105163ae2d5c4ead69c24fc01b9ab5e8ee11b531ee17f02426f3935d143023593dd8499fd8270a1e17ddddb94033", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x501202, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x1c}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x54}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0xe0}, 0x4004c50) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000280)={0x8, 0x8, 0x4, 0x800, 0x73d0, {0x0, 0x7530}, {0x5, 0x8, 0x40, 0x7, 0x85, 0xa9, "044ce29f"}, 0x10000, 0x3, @userptr=0x68582283, 0x4, 0x0, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000000207010300000000000060c69abd68873a1906ff13e875503f00000100000908000540000000010c000340000000000000024000000000000000040c0003400000000000000000840b9b01846b0e17fd32d14e8d97cad859ca2599be047a10465f120837a567a370e0a5a44fef547119ccb080e3cf39875857a4e9f9bd9ba427b1fa6f67989b546f5f12092b53429f7d97e6eef284fc312e75830fd2238961f95409b456563d4024e4011147c57099d1af5e9a74494f95d0320b00639f46ffc2"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 07:09:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x3e}}) 07:09:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x7, {0x2, 0x0, 0x0, 0x8001}}) 07:09:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5453, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x4000, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000380)={0x0, @reserved}) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @dev}}) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000000240)={0xfffff801, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}}}, 0x108) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={r5, 0x2e}, &(0x7f0000000200)=0x8) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000140)) ioctl$TIOCL_SETSEL(r1, 0x4b67, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x80, 0x52, 0x1}}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r7, &(0x7f00000017c0), 0x3a8, 0x2) read$eventfd(r7, &(0x7f0000000080), 0x8) 07:09:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x300}}) 07:09:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:47 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b0000000500000078040000640300000000000064030000640300006403000098040000980400009804000098040000980400000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec00000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aaac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec000000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000100000000ffffffff000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d4150000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000e000000200000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f766c616e000000000000766c616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d41500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400c8000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff0000000029dbfbd1292ade919b07da0fba3d589780e6c3fcff7ebd257fce5275da4c4cbd880e698014980e0338d6fcca277ddca670390c930e5355a9454af1b71d4f73"], 0x4d4) r3 = dup2(r0, r2) r4 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x8102) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000480)=0x70c, 0x4) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000180)={0x1, 0x3, 0x2, 0x1, 0x56}) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f00000001c0)={0xf6c, "02dddc333a0270aad6e591a2af6757fc2aa55e50f40fa354b8ffbde345333718", 0x3, 0x4, 0x3, 0x6, 0x4, 0x0, 0x6, 0x6b}) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:09:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x8, {0x2, 0x0, 0x0, 0x8001}}) 07:09:47 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x500}}) 07:09:47 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:47 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x400000) connect$bt_sco(r1, &(0x7f00000000c0), 0x8) r2 = accept4$tipc(r1, 0x0, &(0x7f0000000040), 0x800) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000780)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000007c0)=r3) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$getownex(r5, 0x10, &(0x7f0000000240)={0x0, 0x0}) get_robust_list(r6, &(0x7f0000000400)=&(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)}, &(0x7f0000000440)=0x18) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) recvmmsg(r4, &(0x7f0000006500), 0x1ce, 0x40010000, &(0x7f0000006700)={0x0, 0x1c9c380}) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="c4ec3967", @ANYRES16=r7, @ANYBLOB="050025bd7000fbdbdf250000000008000a000100000008000b000400000008000a0003000000050021000000000006001d000200000014001f00fe8000000000000000000000000000aa"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x880) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x129800, 0x0) ioctl$FIONREAD(r8, 0x541b, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x1, 0x0, [0x0]}) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x4}}) 07:09:47 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x9, {0x2, 0x0, 0x0, 0x8001}}) 07:09:47 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1584.814216][T15581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=41 sclass=netlink_tcpdiag_socket pig=15581 comm=syz-executor.2 07:09:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x600}}) 07:09:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={r3, 0x4, 0x2, 0x48e8, 0x8001, 0x2}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e20, 0x4b, @local, 0x9}}, 0x6e, 0x71, 0x9, 0x401, 0x7fffffff}, &(0x7f0000000400)=0x98) r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r5, 0x800442d2, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}]}) [ 1584.892960][T15642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1584.892976][T15642] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:48 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)) 07:09:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xa, {0x2, 0x0, 0x0, 0x8001}}) 07:09:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x700}}) 07:09:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xb, {0x2, 0x0, 0x0, 0x8001}}) [ 1585.348633][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0xe00}}) 07:09:48 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x800) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x1b2, @tick=0x6, 0x40, {0x88, 0x40}, 0x7f, 0x1, 0xe4}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = getpid() sched_setscheduler(r3, 0x5, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r5, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000380)='proc\x00'}, 0x30) r7 = getpid() r8 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r8, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) bind$rxrpc(r8, &(0x7f00000004c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @empty}}, 0x24) sched_setscheduler(r7, 0x5, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r9, &(0x7f00000017c0), 0x3a8, 0x2) write$dsp(r0, &(0x7f0000000540)="04c429bed5ab6fd4faa865b6780eafb8cf83f1fa9f354d0ac34a116f29bed7f5e622", 0x22) r10 = getpid() sched_setscheduler(r10, 0x5, 0x0) clone3(&(0x7f0000000440)={0x800000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x35}, &(0x7f0000000200)=""/83, 0x53, &(0x7f0000000280)=""/217, &(0x7f0000000400)=[r2, r3, r4, r6, r7, r10], 0x6}, 0x50) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="0003f4df4154ddbe3aa2527cda0034abd79fe5bda0ad851ad3b0f12671ef97c072387b248cbfd33df7eb446721dd169b46c3bb182291e733fbc7f8ea9ca9d45b50c363d92487fa868f45abab187d004d27ed1252ee3f887942969c2f6efefdd9ea6b5704898416c61d50b63777b7c0ff29f514c14616fb9a30f794cc4e7cc0f56aa644904e004ddf653db1af84882e0cbdf1d3d001000080"], 0x28}, 0x0) 07:09:48 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1585.348651][T16033] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:48 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xc, {0x2, 0x0, 0x0, 0x8001}}) 07:09:48 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x3e00}}) [ 1585.770992][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1585.771010][T16149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xd, {0x2, 0x0, 0x0, 0x8001}}) 07:09:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x4000}}) 07:09:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:49 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0xc000, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x3ea, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x9) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r3 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r4 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r5 = getpid() sched_setscheduler(r5, 0x5, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000003c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r8, 0x40086602, 0x400007) r9 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fstat(r9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = inotify_init1(0x0) inotify_add_watch(r11, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r12 = inotify_init1(0x0) r13 = open(&(0x7f0000000380)='./file0\x00', 0x602000, 0x8) dup2(r12, r13) dup2(r12, r11) syz_mount_image$ocfs2(&(0x7f0000002740)='ocfs2\x00', &(0x7f0000002780)='./file0\x00', 0x3, 0x6, &(0x7f0000002a40)=[{&(0x7f00000027c0)="810394e255e3042978239a01dabba79c8629eca78efddd0fc9ac4b4a38d74f2eda1e603fe0d3efc1912dd6457820b141b65306c8c2d71c8652ed984c4e3a90f52e32f1f9d0baf8fba4a03ac08c7f77de3a666de32847d952e4ea8ce411203f6f24fd58cd775789e8dc5c05ae558dddce09a1b4880952609c902086aa64f3c8c0954c1e8a09c09bfc296b03cb7c40bfb9bfcdb45f9fac44913bbdd1cb3c03fe38cc309c20f105aa46a5792574e8a3bb140d96fd0101940398a6b72388ee", 0xbd, 0x40}, {&(0x7f0000002880)="3c29a5f4c54f04d67496e241eae6269a9e42ddf2495ded5a65a832dd7842971977a881b87d4a6e368b4c7b9898375c47aa5457229e0419489d", 0x39, 0x3}, {&(0x7f00000028c0)="4bcb884b7c9a1f9436e4f579eb93619b9517fab6c04882bd14e489b0252c846be2aecee11c70f16a492d08bbcd0c9cf5878e05652c338e8bcc169028df84117d48cdcffab7f7f851e0ed7f0d51727e9bd91e502f83f000957138c1167429110179e0ea01004fd9ab349a46c04454a1548856e9fe94d08fc974f49980e8213c65ac00b31f041d7c003ff2a146b0fb748d6d4fd393085da6216c8db599e9ae4e89a3e0837c51f111454ec8450b64f2fae073911353477de5fb6e9d1e440e", 0xbd, 0x100}, {&(0x7f0000002980)="5e035546eb5b", 0x6, 0x7}, {&(0x7f00000029c0)="4ea1706b17617d9fa8d4cbbf29508d3a2d900b762f60f039312beca009313ced3fbc5d92e620847b1f0bdb52047be5128e", 0x31, 0x1fffc0}, {&(0x7f0000002a00), 0x0, 0x7ff}], 0x1000, &(0x7f0000002b00)='\x00') connect$tipc(r13, &(0x7f0000002700)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) fchown(r12, r7, r10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000600)="b5aff79d2fa3beb048043ae97ff28bc9c0529feba02b4c807cb09ff34fc96a96f2368cb6e7f9cebfe368b9324085c4a6edc94ddb73b467dfd80077801b0d2ce6ae3fd3c673dea6c205563ab66ffdbd20b97b0e9bb7a940f518b971ae57aacfdd0add916afef57d6b4f0ed325a5eff729c0f9c7d5bc2a593d91692452ff12c6cb9ec313ddc2ced4096f21bd09e6487985c6d8e39aa5951f8795e4ade88f440caec4cb87122d196cd65c154ae8bf7353ce69bf5a1658b81d8535320d213ce8b73878ccdc26adc193423a2ee95cf63799a7ce7ab07a6dfbcfdac8f18bd62136dc51468c50a44050dea4d2dd3c44bfdecbcd0a743c730c15c8c68db8b26a7dd87654b31429a458339110ed7d6c8a039e317a71cdf2ffc776ce86e2c56f4c2e3f8c8e3b0835f1df759ccf401735e11c545d6f97c63874464bf6cc5f01c0d22475ba1e8282188d8fcad637931b0abf8af06ef6a0f6654c90c7ca51e6280d0171acdf4d5218c36e6457b4539fa4ee81c96ac636e25376958898f1ddadcfe53e0e5f077178a45d2738f5ed360c1249d0f05782ced6af023bc3f8b8f238247ed8ef875a31a15cafec8476a5e2d1e700b3eb6db4a15a5fe7aebf97dee1d090739f38dcac6194927d30c1c88d182d9be8852feca087ac6ac67c5cfacc578d4c9d121ace2c7fc9e26102d376a95503fd63adc91adc0f987093bd30a7251fcd3ab4ebe1e9adb3eaa5d24d1dcfb740f501604647aa64602ee3b1db2042fbbd464d0c2a30aab9c2b15fcd7788ecd34c3fb01a8bdf8b5d07ce75abf8bc95b7d1c1802372d5b707c227dbeccc453531534bc98d973b3d404537f27d6e7e55cd67adfb8e7465953523a5989494f04e78125620118cf4fd769fa0f103649ab1d731033e983d4b3300b96d6e0a5d8e5757d445670126c3d205f43ac67fd1dba0d5c636849364de1d3d310da97676196ababd4973dbedd5ada714acb0f86795c56cbd9c4296575dbb4abf7febcae5a33c032ef0a4b5188f2f066d5b5b68395b1b051e8152eee897f5b83f4ac047894a31043b784b55845b9353f258ad7c0697f3fe3e3ab0e5f2f1d5c8a1da2083c0d69d7d81341823735f34b7177245bb2a063b54ed7202229d2effe2dd2c0b0a5e9db48435ec30a90362c951873d61da3b7358c79c3eca863cc1bbdda3931e1aec499a3a8aaefec5e351a1841137634ff8e20dfcbf0cfd330b70b292f35a6097d5a10f66bae5198692139610a7f097985b0bbed45bd8c56c40cc808cb1a8d6e3e2d936811848381fb492a8a3987fa6e250a98524b6d6063a269b7df1877752530f9bb2d769e140441e554d13de2773f6063ee4bba0e656754d9ab4fafa2c6f1e5dbe4a180b628ac460c224f22c12f681537d941ab1fdd6e2c47797a07e11b982a02f48511231ca22df3f19c48eee4dfb0b8102243d60f723450bb5c5f44f0899017c3dd5cf263a64d160a5772300c2ce4257b57e4e12a7b75b4f0b954ba9f0757df2945482895a875189cf868e47f3876759690b12818a43c4d18f491b6a9e63adb11daeca99a1774f569eca751426db4b936eba07c462eaa6ccff546fb609b06dc89a4ef1c06d447bb5d512c0d70b3cb7179dcdad08f244b63ccc59c107be0f2147de0b140bf3514ccb29875a2753cf9f78910743996cabf46c996bca736b732786dbd86f7f649e7564dbc3287af5c1d164681a856570b4a9b38a70b876bb08e755b7f611c1f8e3694a11549bec2fd4b80f967b1c49fac70f93c3dd5f9a1d5410aad5696019fffca5977d8cda44918a5e40040e8896c52f01fc7c4ad23864c314753cbf6db03be5f9f2b3c971a4476f2fc7e8fa7211bc91c18cab64f70fcba7727f5be36ff2c7c0478b5678f1a7122ad099f8b2d6d477421e47420ed04e8e7cd2985da4845dd70f9e582481a1c8e7a5fba1af5be87b7f9469251f3fa59697e6b2e810f0ee1fe8d649da8316c7b47234b7a81d88c1f3e30a727a97b23fcbe26ad96c9cd2baddb2f5a67f8e549722e1f982790e7b49de912f1307a8cd1b79413f183ab21bb6415f4ffc95f0aba22dc3645535829ae46cb36f0e28f6cf1d8911ca63e1cb23009eeb02c740c431614f0e1613a62a12cfd72d38b0ead6c3fc71cf12aeee90afc45468af5ab7375b5c057d6dfd95ce8b4066532597238904042d97a02511186ef0c8dae3854e105b72452e6b02f931dca6c4268980aeedadf5e1c3a52e7ae0f45dfcd51d54e57ed777ed901f25079a0ce145d48c38de2bd48aaa2ab35919eb0ae4a1f75681380cd0fc1d4a99fed4bc9a047c801c1b531d19d1a962e82238777f8223df50f40f9d43406765da3e68675e0296d744265470cfc0b72aef264bfd9f111b7b3494410026f9325349c34277ae53452076c735c8a9bf35868fab9f28d814eb56e186b1d21ee141558dd287f4bae0192b051bfcea6062acde302def83735b51b12e25e33bb7a729c6c9e200af782bf3e3a13f949a8539205e2f5ef2b13e1dc2297a04d97231ea50406e8a3ff6d34831ff5d1bf32201cfc879a4f3d86e3e0ba504c98973e7b27ff9ef69058d2c9dd3607d849710bfc8d12e4d16c0b9ef439d9ea890d39102889925b67cb4c5f5fc3d57c4e4b017c2de729441a1cafa71fa25e0417a23b56a06191b3488f35e2873a0a9d1f853fe83de0861e15f0f3a942a4b4062790fce1d8fbe191992b00b33e9903fb4a0dd9f7495520b0ed75a994bd651ca571ecf7ccd6177d2e1fb881efed474895e997cd64fd17588af25e120e7fc0c2a54becfecb76a71a6db82305bfb1053947fc006a6f077b479270875e377e2dac9ef74e09f12b115d4e095d94a7744673e5c23a8bc967a838994a0357fd26956dee98a21cde931a81a1ae1a96c6dfb1daef23c81ada78daa2c8f58a93c5aad15a780fcf30c9fc52e922dceda767352abbe1413f17f42053c91c4524ad0b12d3cbe6345c45b422118e04561bceacbbf1acbd6587aaa55fef96838646b4574ba51a6071e9ce8721fe4f0023f369986b1617806d89eacba6e34b1bc5a9a0ccc183b7b8d56466359f52437cce45840173aee71c9e228fc7b127182be480c90ff91e6665c09865b77eb82e32b33dff4a62c1b25568ffcfb51570ca1853a157329e2756bdfe0d288a74cefbf21adfa9dbbec788c476f12ec058914d48ffdbba7da7d3333e574cfa4e930de1a536670dd427979b10d16c9516ed3693fc307e1d6ea8960e272f165a9e38fadd6d257e2ad2e26af7755b1c0e976a8672fa9c580d14582e6748f78ee53cc88ce00b962df9df73ac640ad9cf8dd6c02710dc25abe5de9cea45ced39f72d37ea2e025ba653fa49dc20205fa2da5ee17b417710a3536d29e8824446da32eddb3f4e3ad7c2a36119bceb51032212bfe942e75d95f618a4d7915666418f4b855f3a68241ac1e8c6aaa079b9ff2567062c2b24724d8c9d4883b5d897019d742a85153827fe730d028d3ce8aa4b0d20493aea7fc484f52e50efcb0d5ca0794567026a72402979993de6c98c476333df5566b0add11f31e88ec7062dda06563e2f7bc4a22e663f08ee916abde8d3c21443393c3cedf1ad00bbb39343d0d0dd9297b2e6a54a3b4c26dfab5e12bf7ceec7b57b58175cfcb378caa93a510335249d7854e84f42b1d9207ce299176634961fdecb8102f6082f455780d103b6b58d3b0b8f81d652a29ba535a2500c018096f68da7ba73c2a2902625639fbb0aaa806fc3908a955b59ba0fc16846977480c788d97a866cde9381fffe0e2e646c4ef62eb28418d4152b6f6c8bf782506b7a330f8e8a9bcb2c76659299f4e75eddfec380a927440b69d30a7769079e81afef7c47c9297f7e708b69b981bcdee2efc9e8f593691eda8204bb8eb401504413353e26ffd6371c2f9bc486665622441a9eaa96394b8be87ab57771ffc9b678f6bd2e53ba42ec46617673cf077f77d119f15a1e8b2ebc1f6721d1a2a6e8cfb99960cdd9e4eebf872b8550bf4fc220c9f2a04e766f026a18390af65133b722c799734810a30168bcde3f6c81fafa16ccfcda043a080fa99b555d780c87d0f98211cc7edeaadef9c19a59847290be03337ef2e53fd91d5491451a853e544c131610bb6b6ae66cf7b93f20d98c54444fba26ed6f1b546249872540721ef739d56e110846d49ab4f6259770e9cd55599cdf3da571604678b99d27d3c95fdb761507be7fd922622468bc1c0c2777a05289e2c7892169230978b956332ecbd23ea830e612dba7ded5517c6f781c60664658b786a381c485393f5b36f0838b3106d0dc443f05b0c2656ffd350753bff5b4a14d7a943159d9cf7b1344d584755d4468211c2612a45876ae81a45d4f219172f62c5913a534dc4f61ffb1a51f8ea6194f682d2580a4dd1faf3c376af284183ae4fdcef0b2778c67a396231d485b1265b7ffa0beee4774444b968d035d34c01a14ca53ef5f1691908443fce67f631deed1c3af6dba9bbb3235b08df99250e78f9d164c3458e3bfcebb396a1841566eed5bb5efbd0c4de6d564408f5586ca9ec83c8b249e4452641c8b48c733151f70a6659d5fd39cff0801ec7c40b7f9efc37b311fb23fef9cb2ecbac415d61be9e0e7e9fe638e12fae4aa75564cd7332cda00a2147edc408e2cf6aa66a7dee4a858e897c431bab20f4e20056bd29c821c7f1865adda07c0aed70770d9d13f7ebdc79336503df6dcfb82584dec9eae8e06323b2658eb051ca50d7750318660eb0423e2b709619839a40b136b909a752b85e5c85e6906d7bbb9f068072af2afdcf24ecfb2dbbbfc436cba78ad050d96ed4fdb8937d0f1fadd7a763164b3b75ea5041c90d3ae2a20c843045017b0c94da6cf263eb8c364fee4299d254b6ebb834ac6070a56378a9445fbe4278b9979d69a3b5085b9588ff3f8155c9070b99d07620d9b984b4e57a37def315dde25a14ca5a5de73d9e48f4413761d5c923196c6f64e3cd69141db1daad508aaa5f9e5ef62702e2fa110ecd2aa665d2e319b97bff52a65af6fb31cc5b1db42221c41d691ac3a01f4c8d56aa31bf98808be2c3e9cfc5e939420232cb42a22d340c38de5f9b71f105176fdda5e600004fb12a31fcd7a6044da6c0c6bc6acfa7b5ef3c0a9a2c0524b7c9a3eace25cbfde4a6fa2811e005c8bb5a4a2a90b887e1e60663d31466fd1a7ef1c2d6fec561d3b358cf2da920b4a9343ab54f7039f36f025b20910077f377612bc2dc2d055a4926650c955e8dc4ce876a6e5e8e4a3c1484d6283d9ad086300eb0724273c0cd16388beaeb6c132aca107855a177d3a6d5aa826fdbdfb3b2328af639e3db6b90f7fb5a1db0c21afc394af37895249e0cea9520d202b2916dddddaedde76330069a3c4e410122645d15e89e490cef920903bc16ec1f01d8994f3a23b9352611716f8cd6ae474ecb11ce1679227a906a323fb7484fee4388cc0d9c4b3d3631c50dd0e8e04d96301e29707f950d98cec5945aa79525e7b53fa5461e7eeeae9ab55d8f125c59b9f8e4b193be240cbf85ff2abdfe4b5423e043a7f75f0627faa69ba60868f39377db0033665dd405a234ce8d97689212ba068983e86ba9c965913a9acad4156386afc0ba2192e1c1dc5fc7560b8fdf7eb3e816dc11446e0acbda49e932a4f775433b6a05632b3c6c2216ba9c749108dcc44a4110d36d8d77654f4f8b19ebf5cde5b62ff58b3fc5e8ebe06fabe5f97666a28b2f0d6014c739b8736737df4f4c1c9a475ef1de833117873bb2fe5912e5d5de7ac62955617e27383c60f7d20ab7b0cc8532b242d3ef19236d0504874d6f30c", 0x1000}, {&(0x7f0000000180)="9090ba4c226cbc7cc0808ea61bc4da86c8976b068ef00df15987b487e9c8c57111c7a80a3cac3653b673dc14e91e717e5f04d09b0baf9b8797fb0d679b2d4bc84d0e03b7aa6f13587ab39e10f4de3b62cd1396148f33d48c8da0491c1e3034cf1387dbda1bb8844cecd4882d41f81ac9dd18f2c7075d050e240ba10100db2a4e571eb36cc80022bb54ab289f78093fdef976", 0x92}, {&(0x7f0000000240)="b84523bdf3908ca89ba28747464fe036af7788e4fcd603685e50eea551e22ccf7af32ae8d651c96de6da9a766b6f29205e13ab8c25b061bc5304ffd84ca8325c802af8bbca57789a76add9ef09ef5838b5808c926d50dc141e1959039ddc72f9f1be33692647a93807047653d490dd2e49efdfd0fe15b1002de0dd2640c7449e6c4c8b25138eaed144", 0x89}, {&(0x7f0000000300)="a284497cc2f177951d6bc59a100d97cf9aab39d836ccc78e78e19d0507a80572023f64ee6cc7b27f6565f1dc87de68a9b4a02a60b0123753ee389cf52c6afb3c92c76978ab84b19b1ca522801f13ccd60dd7b5660812c9f76626e7a895f26f2ac407dc", 0x63}, {&(0x7f0000001600)="de004ad03ca08e27448a395f7f6528f2cd9b38616ade7d44be54ead93993f372a5a94c2dc809589fd8ed2487a904829750fe6e1e01a3d1f78e745fed7985e324a0d7292d8a336af27db3a4878def1cd374638a1c9b9f3ec0c5141f2c54ef001ebe220a42acab5117040ba3d0b279a35e47d6a3fa1d21b8302690dc7552c6ede96fd2298226049b065d294f331e9c3443ae3f676480dab31db6df73b363ccd4dfca801ad457534733f9a097b3fdbd38f2d609c47bc9ac4672a3eee77d1fbd9f454ae83af3ed665832cd32b0f3d29abebc102656597222f61a6ff86401c3961d2dd3b7e2955361cfb33292a898565a869dde394fa38feb469124937f1814619d5bc93cd37b100519135274fb60128c4d3b4ad90eb26c6aec5774528df109ef79806d813949554819e012d2eafe696c677f0046f3694bf93e28b260c8ffa26288cf8425869b5ffabe9ad4a66727f5d68bf149ac792a2d655eb9499c6711508d11d8271f8c2a95a5de1cba3ccd08b60d3524dbb2b397eb474dd85e4b5a830762f12c4244aca6637c71a6d578720844cdba17d24623f2ef0cdf357cc99979537cafe0d0d3f0c821d4deb2f60387a60fe3f7cd9b95d7926fce0020230290efebb23dc4854359a08fe8c5a07540ca5976107cd3af702fe32bf46bce85a1c38e221b8a9d8c0e3c07599f02d440afc0a99f30e2a952e6459066983d8816d417f115194bfd32fba4143e9ff9dd60bf3fb9f14a2e64ea411e718017ae1f8655b35f4e7f53ffbbaf3f008ef348540129f3b752ba01b0d45cbad63e82b3151ca49a537714f1191a1ceb16ea6b0d0bffc0387d66aa7452c6eb4b6e44f5ec2ec499ad44d9a98969f1937cb5cbbb8ca24382fbe7767980df735f80f60812e99d71a415069ba97fdbcd28df7ca143e626c583d2048889fa422ab162ae4a3473ff1b3566eb8e27f15beffb73ad2559fe5de921512668705024435aef8c685f95a4c61630dc951002b5f0a6d7833ec0e5052bc6d343698f10849b293e77c24818ec3151b51c2063faeba5d8f356e8c7fbc9f8d5d5e12a575f38ddf473bce10dbdb8b4b4622375740fad296cbb9de3adcc3628ae8814af4d0b2206f6776ec185129dcb483c5e769090794c24340cd8d9497b52364885fa0c3b64251109b122850db84c662ab64d70e7d567b6f10d380e35e5a7c43cf1adfdb2cf526ac07b0130fd319e7fd94cdf04063d8e9a665b735e093fa2c0f9c0d026e4d443ff45e81fb81301f4d07404d6effaed61ada9d63f21f2fb705ba37e7303288021c1922b75e06c99868e83756610587e67b14dc2a809ce47a6835c5bc219193a076826a013831248f95132a2b47a487743cf848531477c4fe0941ee6e9cb34dd67a33dc2cb8b994350864adaa55bbb53c848cfa1f333efed64a35afaeadb7bcc32c8cae262c8fc7792914e285ed937300bcdbd9490c0bfb4bc3b5a72076c41aa4201ff2b6be4ceef39b99e73c6ec12906660970756872588dd95a1b36ef3643fe97c08600043a8cf1d15c56ba184aac8726119635124594e670d0fcae6301939bcad4757a675964cbabfb6520af9fae4cbf77ffe1bfa0e5df1dd38ca970e68f07fad0be773217e8f94561f473f24259f8383ffd4dc680c142ae887c6bfd89fcf491b84e758f2370fa00baf1a93641d439c0dd77c9782eb6b5abf0ce920db631f69b31f92b7953893e053c735054c830ace841ef25ca02555cbf438a81b345abcd7c4c68d971be5edf3f69bba9069a60206461fdf06b1b25fc7228bd2649f9de6042bf61ad666330a22ca8fe822dc366bc8a575ef3c6125e598e3b8b799aefe7b8afb5926f3256586caec18f0820921315019853deb50e9fab60cfc0703d771adb9a5d7594f6e7356d993b2c11669de0918dcd3f127fc0da0a5f2f6efc201bd88bce61efb700fdd0d02c931843ef6dd43a6774a2b0572acbffa42d3659f151c01db426540832d97d9a52e3caf5b2887b515b3b9e4c0bc9dd0c6dddc19547a884ab08d352259ea20597a559fd536a6ad07863a29bdf68dd7ded4dcfc5d1745336fad5d88d9ad94b489ea330bebed2619f2b9d00f93f0c0d4da53d914975ce920c70a146d3eaa6fa11a263ff90f971522bb6a819a05af8a17554996750ebeb9e9c7c3987195bf724a39ed4a98f1e3bd1e059751ee9e24a4add98d7f2652023b173ed4ee4688734fa91f37ca856c31e226424b0f808b6d7075461ae9d302bbb7e789d58edc50c985943a8101e6a163be2a3af68947cb8d3e5cd8fa348e9d9c923510d1e2bf35ba24749f32f31a55c9fa31c9557a7baebb2fc499495d3b38f080a11f44a6a2b610d462e57998b69a52b2a682627249bcc7a9b5756f47e1aaa2bf6870321e14ba28688cbae68b487e9efe43fbaccaf08746b2398766891f860650e06ab5cd92cf328dd9929d8a2f0657122afe672c5ca3d3bbf1a66722fda3f95617989fc5b782b56e4f6931732153bc8189a44a0ae849a6b783cb03ad05b8e837e46bd7ef69f3f7e699b761f8b10873dbfc86d49b150817aadea5f8fa34b8cc47dc88b8b7e3a5335c388e2d55b52b9f8646e6c2f2e1a22898a574137073a0a18c9ffe06119d18a6525d683cb5a3636b61b9edcff56de2027be45b5d0cd44b4100a42f65eca41d31c1497fa38a1db079d3fefeb647d2fc97df0a0d82eaabb403c775bcc5afa06fd421b58f85624dbe4212b2f239cae38e06f9ce19f175a0b972c36060273acc992b3b008f092208f81481c9804d050f3cb6350931acdc7a0b7f5c8600e1cac5609623c03b51970e5e7de49387e100f99842de4dd4d471f0cf1c73130541cd6cdfd16b9497d4a3d259cc800c2d4c59a9783f523f15460d8c75ce45cc3a317f2c4134c711fe21a2833c5f963f6aa600ac5f80cfc46d945d56c84ea74ba9e35d74c29dcc34c8d804e522dfe6399558c74ad46608378c6841ed1115bf4d50fa30318c11cab3cbb30d7f0ab6c347097fa1174ca2bda8a7ffb2c4621c55297d86418a2d544db4d2a6f5fdb70860053c81538ac8c2df9ad7ffcadd1feb9011d2edfcd0454c41ff41d80856dc962909c0cc453a0ddf4967d078586408752a9b8880151aad139a334f1ad81703779cfd56ea6e0559d78713fbc397bfa58b4a919b630d3bca602ad43b25c7314305b125dc7a5c7980905bbd0a998dd0fedf1e04d82d84b6096da4c4c66d8a0c4281c3f576778b89348986e104deb64e741934f13f4b6013d1e1cb0c25a08f8b2b7411407804210673f46d4f77874028898c4000f43839cfdfed5a6162f8c364adda78a6b2d63f01487d8e729cebd6a7df79f67ed85a104aff43b67168ff8994a9929e63975be37ad8439595b679b9c568429a2f1ef8e8940e323c74099fb0ba373d18dbfe199b4aa1d832f2adccdaadcafee4e8bef365f9be25fa6dc82cb4f67ca53276d4c5ce9ef9def2b512b14ba9f868352810d2695ee1603cb2a4861cbcd06a2f176b7deef71c28f8f6905bee2358041ccc62428e8c361a2107b785e1483979894848e23609d2a96a385725d07b350a7a6deb8c1bcb4da146ea436ce64b121191103da21112bc023bbdb53b0d447e05e1231db04324b46f8a15eb26e7af63f5e2b43e445b9cca07eafdb8021b9b0b87fa112242c9829d97b5a9a10f959ea56d20c7e2f531d211be3a2f35d4e9928120ee7de780431fd2b412264740be2f735f8523ca320488895283ccb8768bff63ee5ed895168825ae9f5593b658fcf625fe8104d61fa44815ddf7aa0867f67909df89c2be5b8d5ee76d0dfbcab1b2fd8cb0387941853e3a60c65c86d60919c50b3bf2837104f65ab0c391bd691f31565fbcb03fa7b2e9b5019f08e3b1564a7ed82593ad9ead071c4c69ddca9d8659a62bb909584db6cd574e15b5f80681630034c98a5b3544b27c5613a8ac10607cad115f143b3a30c728ab970916629cd0efc13cac199053bdbe2657368bd78d5211bb1b02370e8cb69dfc3c8385d983e68d3aad877d174c8025fcf5dc26227f345ea1bcadd78c7fbb4a12f854bf422ee0947dc471f8f466ab3a3fb682009cc0e02b13441664f5730977a959951604fd8f3248a851c46f2b45d669555ea86d4802b773742fd7ddb71dfb1a1befcc1bf781858265fe763c0fef8335703f5aa3cccca35382853b99fe5dd6db76e0a9e7a0599176832f11d452d03e7d1637c5855f9ec358aa9f8ade547ece9e4559483723e59998f9eccf379046f7e83d141283621182bbf10091c63af7a9f47f5b8a97773323a40fa2c74bb3b08b7c49837d25ba77dfa666405f2004e2ac5a48c9bb5d5b0975164787250da38fa889e849ad9d7e58a059f15417977f4bdae61e4ec7e6c6b0ab15d7e7657a9c18ecb81e443a0bbacb1f06c3f5d05f4e5652cf672d334bf2fb69691c2a9863a74b09ec58e2982b297af3a50fd4af9b0679683d7a73373ca9045f30f56833153998bee7336e813decacf2282a5c9009cac710dd545217ab88e30d3e6e855119a639ba92cfc490dcb19627f3a22ce16b6ee201416f9f752e8c5e4ec442ff6dbcdc1d308aed9c27eaa5d0ccf0fba6fa43d9da599001e2f03b115f01b2b78335a1667a2d6ef3d810a033190b981afec2eedcd85cd5dfe81c7a7adc1a6145b4bfed5498df17017b263c4975c0d4dc89e34d89ed1051d9d059873f80831a99e9b264175f936fec0633db8fb16831c7862ed7f659904892ccfb03e7fc31c5ed9ef3c49f9b9744c4e9eb4d3f6cdc651f30351b47f467026e174abb6ebb00e9911f2b1412caac6678133d93c8a00cc97e5764c92bd0f6a0f56f4534fc183c305229650258c49fc074054bc58fbbc07a332d76bfcbd795fb6ab84804237ae79fb0a874dc89efc405b97a7497e0e784caec4511d0d5f04cb2e78e07bfbc4513eb649b214716a821b7c36f3c350fb77293daa7f5e0c554c7892004a12579d8187542c0162588af44aeefaa4f383ec9d276e18e60ecbe6294485dc0f30722b99b7097903bd2dd600dcd143a8be9471d309ce7814dbd4a2a7356f7ab62c795dbeb4303ed5e361dc76b26899f56b92602d92dba24c807e3e5fdd8c8343d56c1284a621d96bdbf1eee41ce5ca5505e146ab822c67e652dbc488f17a04f8163816311eb07e67be9ccd371b086ec3c05334d62662af1402ff7bf24f4303371999c3db65450a3650858d359deeaa20cc38d9c722d846ac0e44d32abbe0e3cec11753bd0986299a713d8b88fb33fa4c302d04380aa948107c232dcbe2c33edc667924a50a0f584a9b91bdedca4957fba303ab0eb23c0143627c17fe59c2bfbace63a6ee867fb0dbc2e78843bfaf8a1418ed26b0143d1d2c9e0ed998d98010655d71c4b0741fb32a8072678f4630dee9da59d49ac3e9d78fba9b4dfa27d6c8969174795e1729c543d29db7bb561f21f95079762cce7eafd31371077586c097ada681828b491b1efc52f811054f1b0d8d57070cdc06461df859a977ac421b6791fca3a2fccfed6856bb9c59c609192c68bcad84238ee75eb3405d6dc244a80df737b86b668fc50dc55578e8a2e11fb630f004b056e7dda7f7b5b61e81cebaae5a5f4c0be625fcc782f5f80e5776fa8fa8a2c7e51a0efc898b5ef073fbafeca896032bed02d12cac0951a8cde43373f70818e079f13cff8594dd489117fd114dab4b64977e03e4c25178fec613f5aa277c03ba1fae91c9572cd87050e7fa5b240a56508b90ab1eb46ae53d0b29e4712759d35bea116f3860d027df7732bdcf215ad5aebb13511d9bfc01252d59665eda9bf78cfba28bb19913502", 0x1000}, {&(0x7f0000000380)="d5659444", 0x4}, {&(0x7f00000003c0)="d70ea70023b9e75526471658b21931eb9e951f12dc83911659b1b2a4e0f7290c3d57f59cb263faa547d85c426266e76acbb47f2443b6e439f2583cf58d20a5c4853bdbd32152cd4203aee9d7999a7d5fe4222018e3393d8c62f64538bad02895688c14983e994aa3b77890fa44ba5f79e129dd31a5eca80ffc17bf295e0b8f8f3da7d6448181c278f041ea068f947f203657030aef8dd9b1d3736ab10a1eccbef363725d61a6a8e2ef6974209e4152", 0xaf}], 0x7, &(0x7f0000002680)=[@rights={{0x28, 0x1, 0x1, [r1, r2, r3, r0, r0, r4]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r10}}}], 0x68, 0x40800}, 0x4) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:09:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xe, {0x2, 0x0, 0x0, 0x8001}}) 07:09:49 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0xff00}}) 07:09:49 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:49 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x3a100, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000480)={r2, &(0x7f00000003c0)=""/141}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000140)={r2, 0x1}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000240)={r2, 0x1}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') syz_open_dev$usbfs(&(0x7f0000000780)='/dev/bus/usb/00#/00#\x00', 0x1, 0x12800) preadv(r4, &(0x7f00000017c0), 0x3a8, 0x2) r5 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000080)={0xa20000, 0x1, 0x1ff, r5, 0x0, &(0x7f0000000040)={0xa10903, 0x1ff, [], @value64=0x2}}) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f00000001c0)={0x0, 0xffff, 0x81, r7, 0x0, &(0x7f0000000180)={0x9b0951, 0x16c7, [], @string=&(0x7f0000000140)=0x5}}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000000)=0x3000) ioctl$TIOCL_SETSEL(r3, 0x4b67, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x2, 0x4}}) 07:09:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:09:49 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:49 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0xf, {0x2, 0x0, 0x0, 0x8001}}) 07:09:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) [ 1586.826882][T16714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1586.935367][T16714] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x10, {0x2, 0x0, 0x0, 0x8001}}) 07:09:50 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x3}}) 07:09:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}}) 07:09:50 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:50 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x1, 0x7b87, {0x0, 0x7530}, {0x3, 0x2, 0x3, 0x3, 0x9, 0x7, "ee4c6c53"}, 0xffffff4e, 0x2, @planes=&(0x7f00000000c0)={0x80, 0x5, @fd, 0x6}, 0x3, 0x0, 0xffffffffffffffff}) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000180)) 07:09:50 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x11, {0x2, 0x0, 0x0, 0x8001}}) 07:09:50 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}) 07:09:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x3, 0x0, 0x0, 0x8001}}) 07:09:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:09:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}) 07:09:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x4, 0x0, 0x0, 0x8001}}) 07:09:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x5}}) 07:09:51 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:51 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x5, 0x0, 0x0, 0x8001}}) 07:09:51 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x0, 0x4, 0x4, 0x1000, 0x2, {0x0, 0x2710}, {0x3, 0x2, 0x3, 0xae, 0x19, 0x18, "babbddfc"}, 0x3, 0x2, @planes=&(0x7f0000000140)={0x5, 0x80, @fd, 0x6}, 0x3f0000, 0x0, r0}) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000200)="721e0222b7c2e13c6e8af2e5dd0740a72d860759eb32abdfc1348354a18113df0127282eea3d13ed040886026aa9310439ef0d8a910acb8d435c95c560d0c21785ac3600bae65a4dbfca8fdef3985d6e403ff590fd544107095855730194bec99731b35e856ede43d0930e84099f5a1d10b12c2e7baa61d734d84a69a99ca0983b143b71af414e32688ea4b7affbcdede3f9484de1ecb73b526dea92e22725b7e35d0443aa4083c977f7b8d47c548f05341b9e7ec5fab6c0d77c68b7846ff85258bc8b9a1dd7d272", 0xc8) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x400, 0x0) ioctl$SNDRV_PCM_IOCTL_PAUSE(r3, 0x40044145, &(0x7f0000000100)=0x9) sendmsg$inet6(r2, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:09:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}) 07:09:51 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}) 07:09:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x6, 0x0, 0x0, 0x8001}}) 07:09:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}}) 07:09:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x7, 0x0, 0x0, 0x8001}}) 07:09:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0xe}}) 07:09:52 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:52 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:52 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3e}}) 07:09:52 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x8, 0x0, 0x0, 0x8001}}) 07:09:52 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0xe102, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r4, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f00000002c0)={0x9a0000, 0x1ff, 0x0, r0, 0x0, &(0x7f0000000280)={0x9909d2, 0x200, [], @p_u32=&(0x7f0000000240)=0x2}}) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, &(0x7f0000000300)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={r6, 0x67, "05c02cf56c8c7aa1207b5447237a03626376ff79044bf190668cb6c7b34846ba01e39c7625db14153f15645dcf44f66bbdd0dbf36ff2851d018f47a37d55fc26a15301786ffc713428e8e6de1e7ff5f0e6a86d0c917f25e59407c2a8ce7d6e68f2c3fcf20448f0"}, &(0x7f0000000180)=0x6f) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x80, 0x400, 0x206, 0x200, 0x4, 0x0, 0x101, 0x5, r7}, &(0x7f0000000200)=0x20) [ 1589.634947][T18331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1589.644208][T18331] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x300}}) 07:09:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x9, 0x0, 0x0, 0x8001}}) 07:09:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, 0x0, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:53 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) sendmsg$rds(r0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x9}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)=""/92, 0x5c}], 0x1, &(0x7f0000000b00)=[@mask_fadd={0x58, 0x114, 0x8, {{0x0, 0x8000}, &(0x7f00000001c0)=0xfffffffffffffffb, &(0x7f0000000200), 0x400, 0x9, 0x77, 0x1ff, 0x34, 0x3}}, @fadd={0x58, 0x114, 0x6, {{0x3, 0x433}, &(0x7f0000000240)=0x7, &(0x7f0000000280)=0xebab, 0x3ff, 0x4, 0x7ff, 0x8000, 0x42, 0x24000000000}}, @cswp={0x58, 0x114, 0x7, {{0x5}, &(0x7f00000002c0)=0x9, &(0x7f0000000300)=0x2, 0x8df, 0x4e7, 0x5, 0x6, 0x20, 0x608d}}, @rdma_dest={0x18, 0x114, 0x2, {0x7}}, @rdma_dest={0x18, 0x114, 0x2, {0x1, 0xff}}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x6}, {&(0x7f0000000340)=""/102, 0x66}, &(0x7f0000000a40)=[{&(0x7f00000003c0)=""/235, 0xeb}, {&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f0000000600)=""/214, 0xd6}, {&(0x7f0000000540)=""/1, 0x1}, {&(0x7f0000000700)=""/230, 0xe6}, {&(0x7f0000000800)=""/92, 0x5c}, {&(0x7f0000000880)=""/179, 0xb3}, {&(0x7f0000000940)=""/22, 0x16}, {&(0x7f0000000980)=""/134, 0x86}], 0x9, 0x0, 0x848f}}], 0x180, 0x4000000}, 0x20040041) perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:09:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x500}}) 07:09:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xa, 0x0, 0x0, 0x8001}}) [ 1590.233581][T18697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1590.321504][T18697] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:53 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:53 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x600}}) 07:09:53 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000f8ffffff0000000000bb", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) 07:09:53 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xb, 0x0, 0x0, 0x8001}}) 07:09:53 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, 0x0, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x700}}) 07:09:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0x0, 0x0, 0x8001}}) 07:09:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="ee7b445c"], 0x28}, 0x0) [ 1590.956477][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1591.011108][T19187] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0xe00}}) 07:09:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xd, 0x0, 0x0, 0x8001}}) 07:09:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:54 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, 0x0, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3e00}}) 07:09:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:09:54 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xe, 0x0, 0x0, 0x8001}}) [ 1591.514095][T19518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1591.581761][T19518] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:54 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4000}}) 07:09:54 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:54 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:09:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xf, 0x0, 0x0, 0x8001}}) 07:09:55 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0xff00}}) 07:09:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:55 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffe06, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0xffffffff00000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f00000000c0)={{0x3, 0x0, @identifier="50d94284a4d217d399959a531a90ea4b"}}) fcntl$setlease(r0, 0x400, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x80, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x1, 0xc, 0xc, "b56a08190b47417baafeded4289924e3039ea6132eb23d51c1ac834c959ae55690ae62dfd910c81ced0eca6c4e190a085f9be1bd2a9e78d8e22552445c527b39", "ac83c51ce4dcb5c2cad15696073b98cce9865c1394dae74391ededf2e19715c73e88736095d2911a028b293a81be4d637c7288abb0a182324ab514e749e5392b", "ba36a33185b470dac974b29629d6076f2cf2da361f2ebde480ae037b911812e3", [0x1, 0x7]}) sendmsg$inet6(r2, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:09:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:55 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0xffff, 0x0, 0x100}}) 07:09:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x10, 0x0, 0x0, 0x8001}}) 07:09:55 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x2) write$input_event(r0, &(0x7f0000000040)={{}, 0x17, 0xfff8}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r1, 0x4b47, &(0x7f0000000100)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5453, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000000)={0x92, 0x94, 0x800, 0xff7f, 0x6}) 07:09:55 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:55 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x11, 0x0, 0x0, 0x8001}}) 07:09:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:55 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0xfffffffffffffffb, 0x10000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) ioctl$SOUND_MIXER_READ_STEREODEVS(r1, 0x80044dfb, &(0x7f0000000100)) 07:09:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:09:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x4, 0x37f8, 0x0, 0x0, 0x2}}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x48) 07:09:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x2, 0x0, 0x8001}}) 07:09:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3, 0x400000) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x194, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x194}, 0x1, 0x0, 0x0, 0x8000}, 0x900) [ 1593.094974][T20807] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1593.187781][T20807] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:56 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x9, 0x0, 0x0, 0x3}}) 07:09:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3, 0x0, 0x8001}}) 07:09:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:56 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4, 0x0, 0x8001}}) 07:09:56 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:56 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x6, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x80) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0xffff, 0x230003) write$fb(0xffffffffffffffff, &(0x7f0000000180)='gf', 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000001840)={@loopback, @loopback, @mcast1, 0x8, 0xff8f, 0x1, 0x180, 0x8, 0x200030, r2}) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000140)=""/40) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) 07:09:57 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b0000000500000078040000640300000000000064030000640300006403000098040000980400009804000098040000980400000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec00000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aaac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec000000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000100000000ffffffff00180000000000000000fffcac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d4150000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000e000000200000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f766c616e000000000000766c616e300000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d41500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400c8000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d4) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000240)={'netpci0\x00', {0x2, 0x4e21, @multicast1}}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x30c00, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') r4 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x17, &(0x7f0000000800)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x1e0, 0x0, 0x0, 0xf0, 0xf0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@multicast1, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @gre_key=0x7}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) write$FUSE_INIT(r2, &(0x7f0000000780)={0x50, 0xfffffffffffffffe, 0x2, {0x7, 0x1f, 0x40, 0x100082, 0x5, 0x400, 0x80, 0x9}}, 0x50) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000200)={0x80000000, 0x2, 0x5, 0x5, 0x25c}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x68, r3, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:audisp_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) 07:09:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0x0, 0x8001}}) [ 1593.917969][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1593.956789][T21322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:57 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x6, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) clock_gettime(0x7, &(0x7f0000000140)={0x0, 0x0}) r4 = semget(0x1, 0x1, 0x0) semctl$IPC_STAT(r4, 0x0, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xe4acc4548bf3a791}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bad7d488dd6f372847b10bd7c251d69904285b570f105bcae36136707ff1dbbb0dcb0a119d78bd4724f7b1e7e6b960d2c28eacb28ccac1f2482f8921939dee9df598adde68b9d2d51565e58c7f516c58d272ab1ea2a3bd20a555207480ec9df2b7455884f9a94a2662a6196a6eea10e6cd8c6ff380231c6cdc24f1b6b10e530305395652dcf17ae22149db0e77d697b7be4d1675529accb1cda95664e57ee864bd94f714aa44cfff2fecb3938993", @ANYRES16, @ANYBLOB="00012bbd7000fedbdf250100000008000200020000000800020002000000"], 0x3}, 0x1, 0x0, 0x0, 0x4000820}, 0x20090) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f0000000a00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x262910}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, r6, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, [], 0x3}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4002804) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040080}, 0x4000) semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000080)=""/90) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000040)={r2, r3/1000+10000}, 0x10) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)) 07:09:57 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}, 0x180a0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) getsockopt$inet6_buf(r1, 0x29, 0x2c, &(0x7f00000000c0)=""/62, &(0x7f0000000100)=0x3e) r2 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) accept4$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x1c, 0x800) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="00b00000"], 0x28}, 0x0) 07:09:57 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x6, 0x0, 0x8001}}) 07:09:57 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x140c0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0xffff, 0x0, 0x3, 0x7f, 0x4}}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) 07:09:57 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1594.324894][ T27] audit: type=1400 audit(1579849797.551:94): avc: denied { tracepoint } for pid=21666 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 07:09:57 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0x0, 0x8001}}) 07:09:58 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400200, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000003c0)) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007) fstat(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r8, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$DRM_IOCTL_VERSION(r8, 0xc0406400, &(0x7f0000000500)={0x8000, 0xfff, 0x1, 0xb2, &(0x7f0000000040)=""/178, 0x1e, &(0x7f00000002c0)=""/30, 0xd8, &(0x7f0000000400)=""/216}) r9 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000740)={0x2, 'sit0\x00', {0x7ea}, 0x2}) r10 = inotify_init1(0x0) r11 = open(&(0x7f0000000380)='./file0\x00', 0x602000, 0x8) dup2(r10, r11) r12 = dup2(r10, r7) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000005c0)={0x3fb4cbfa, 0x8}, 0xc) r13 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_STD(r13, 0x40085618, &(0x7f0000000580)=0x80000) fchown(r10, r4, r6) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000700)={'veth0_to_bond\x00', &(0x7f0000000600)=@ethtool_drvinfo={0x3, "f4c7c423970fe809472f1e302c837e45cc01f5d38a9cb2c662c2e743a4032f45", "1a98aa7be8a32e70b9c3d076b09cd97f0858b7373436a7220d02fcf9ff8ca218", "01df5e069d53f8f9fffc49d9f471d36cdae54ec73288102a62eddaf60ce14d79", "f72372baaa60eb67b5bc524dae7a81669e7e8c4fa27106ad91c5c93dd18f2038", "e8427ec7c39f2505f932c9ba08f33bc7e4d76c31bf4c7930a821355899855669", "0e39da982a00a3f9749ceb28", 0x2, 0x671f, 0x3, 0x2a1, 0x33}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@loopback, @in=@multicast1, 0x4e21, 0x968, 0x4e21, 0x4867, 0x2, 0xa0, 0x20, 0x3d, r3, r4}, {0x7, 0x5, 0x80000000, 0x5, 0x8, 0x7ff, 0xc5f, 0xff}, {0x1a3, 0x3, 0xf9, 0x1}, 0x7, 0x6e6bb2, 0x0, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x4d3, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x38}, 0x3501, 0x4, 0x3, 0x40, 0x4, 0x80000000, 0x1}}, 0xe8) ioctl$TIOCL_SETSEL(r1, 0x4b67, &(0x7f0000000100)) 07:09:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x2000000000400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x40000) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:09:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000080)="749b9ca7a1a86333e697c869bf98b0bb4355ec07aabdc92a792c47be47944074a69283314c35f3f2196e41e200dd1d0a0ae951cc50adc7ea6c05301827") r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) 07:09:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x8, 0x0, 0x8001}}) [ 1595.142373][T22324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:58 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x68, &(0x7f0000000040)=0x4) [ 1595.231808][T22324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:58 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) r1 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) sendmsg$key(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r2]], 0x8}}, 0x20004850) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x2cc, 0x2, "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", 0x7f, 0x7f, 0x3, 0x81, 0xff, 0x5, 0x3, 0x1}, r2}}, 0x120) 07:09:58 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3e, 0x0, 0x8001}}) 07:09:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}) 07:09:58 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:59 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x141000, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0x6, {0x66892f0c, 0x7ff, 0x3, 0x8}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) symlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$TIOCL_SETSEL(r2, 0x4b67, &(0x7f0000000180)={0x2, {0x2, 0x0, 0x6, 0x4}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000240)='fuse\x00', 0x2100000, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB="2c6d61785f7265630286a7b13f4cce100390fd372b2fe361643d3078303030303030306a1cd5ffe99cbe52303030303030", @ANYRESDEC=r6, @ANYBLOB=',fowner<', @ANYRES16, @ANYBLOB=',\x00']) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000000c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x1, 0x0) 07:09:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400400, 0x0) ftruncate(r1, 0x100) 07:09:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x300, 0x0, 0x8001}}) 07:09:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1595.987449][T23097] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1596.014252][T23097] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000000000fe8000000001000000000000000000bb", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) 07:09:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x500, 0x0, 0x8001}}) 07:09:59 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:09:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) recvmmsg(r1, &(0x7f0000006500), 0x1ce, 0x40010000, &(0x7f0000006700)={0x0, 0x1c9c380}) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x964, 0x0, 0x5, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x800}, 0x2, 0x4, 0x4, 0x2000, 0x11, 'syz1\x00', "0b1e9d4b757249e53710d698d4b0fda297a53b59a7be983d12c44c3b0edb01f9", "2182e08afe1862d3c04dd9248e32279130246ce400209c3156bb572882daaa65", [{0x6, 0xfff9, {0x1, 0x1ff}}, {0xfffb, 0x400, {0x1c2dd1060cda921c, 0xfffffff7}}, {0x27a, 0x8, {0x1, 0xff}}, {0x3, 0x1ff, {0x0, 0x8000}}, {0x3, 0x0, {0x3, 0x6bd}}, {0x9, 0x6, {0x1, 0x2a77}}, {0x200, 0xd5d, {0x0, 0x5}}, {0x0, 0x8001, {0x1}}, {0x9, 0x3, {0x1, 0x9}}, {0xa9f0, 0x5, {0x3, 0x5}}, {0x45a, 0x87, {0x0, 0x9a}}, {0x5, 0x4, {0x0, 0x1}}, {0x6, 0x20e, {0x2, 0x34}}, {0x9, 0x8, {0x0, 0x8}}, {0x8, 0x4, {0x1, 0x2}}, {0x6, 0xa278, {0x3, 0x7fe}}, {0x0, 0xbb81, {0x0, 0x7fffffff}}, {0xfffc, 0x0, {0x1}}, {0x1f, 0x989, {0x2, 0x39}}, {0xff, 0xfff, {0x0, 0x4}}, {0x401, 0x8, {0x0, 0x5}}, {0x3f, 0x7, {0x1, 0x1000}}, {0x7fff, 0x20, {0x2, 0x4}}, {0x5, 0x8, {0x1, 0x3}}, {0x4, 0x4, {0x0, 0x8}}, {0x800, 0x5, {0x3, 0x3}}, {0x9, 0x800, {0x3, 0x1}}, {0x0, 0x8001, {0x3, 0xfffffffd}}, {0xbd, 0x101, {0x0, 0x1}}, {0x0, 0x401, {0x1, 0xc339}}, {0x7fff, 0x8000, {0x1, 0x2}}, {0x4, 0x8, {0x1, 0x1}}, {0x3, 0x4, {0x1}}, {0x7ff, 0x2, {0x1, 0x8}}, {0x7, 0x7, {0x3, 0x800}}, {0xffff, 0x8, {0x1, 0x10000}}, {0x20, 0xbec, {0x0, 0x2}}, {0x40, 0xbf, {0x1, 0x80000001}}, {0x6, 0xdc, {0x0, 0x3f}}, {0x1ff, 0x200, {0x1, 0x9}}]}}}, {{0x254, 0x1, {{0x1, 0x101}, 0x8, 0x8, 0x8, 0x3ff, 0xe, 'syz1\x00', "14dea95d2ff3a6c530cf600f3e3e6f16ac537fe96a4c489d2fbf1b13d3b1ab43", "3916f041816c0110345736aac3d51ebfcd81ac947f16920ee99e20ef4a5ef0f5", [{0x7ff, 0x5, {0x2, 0x9a2}}, {0x861c, 0x5, {0x0, 0x3}}, {0x7, 0x8, {0x1, 0x800}}, {0x8000, 0x8000, {0x0, 0x1}}, {0x8001, 0x12e, {0x0, 0xfffffffb}}, {0x979, 0x1, {0x3, 0x20000000}}, {0x100, 0x1, {0x1, 0x5}}, {0x7, 0x5, {0x1}}, {0x6, 0x7fff, {0x2, 0x1000}}, {0x6, 0xa08, {0x0, 0x5}}, {0x7ff, 0x8000, {0x1, 0x3}}, {0x1, 0x27a4, {0x1, 0x80}}, {0x7, 0xff81, {0x2, 0x80000000}}, {0x7f, 0x1, {0x1, 0x3}}, {0x85, 0x7fff, {0x3, 0xfff}}, {0x7, 0x4060, {0x1, 0x8}}, {0x5, 0x449, {0x3, 0xfffffffa}}, {0x5, 0x0, {0x2, 0x7}}, {0x1f, 0x3ff, {0x2, 0x1}}, {0x89f, 0x4, {0x2, 0x8001}}, {0x4, 0x9ea, {0x2, 0x7}}, {0x401, 0xffe1, {0x2, 0x7}}, {0x1, 0xf, {0x3}}, {0xc662, 0x7f, {0x3, 0x2}}, {0x101, 0x0, {0x1, 0x3}}, {0x3, 0x3, {0x0, 0x7fff8}}, {0x7, 0xf001, {0x0, 0x6}}, {0x3, 0x232, {0x1, 0x1b08}}, {0x5, 0x7ff, {0x1, 0x10000}}, {0xffff, 0x20, {0x0, 0x1}}, {0x0, 0x101, {0x2, 0x2}}, {0x2, 0x7fff, {0x0, 0x52c}}, {0x9, 0x2, {0x0, 0x4}}, {0x8000, 0xfe4, {0x2, 0xffff5628}}, {0x401, 0x4, {0x1, 0x8000}}, {0x1, 0x7fff, {0x2, 0x6}}, {0x3, 0x2, {0x0, 0x9}}, {0x9, 0x800, {0x0, 0x2}}, {0x2, 0x6, {0x0, 0xfff}}, {0x9, 0x7, {0x3, 0x40}}]}}}, {{0x254, 0x1, {{0x1, 0x7fff}, 0xff, 0x30, 0x1, 0x1, 0x19, 'syz0\x00', "d86baaf01beef1f75681a6598bb230c1ce8d3f1c271785f4a5a8833269374149", "58ac77c824f31bb66493d478855c715b300089aa429978dca98a147801ae95ea", [{0x6, 0x0, {0x1, 0x7}}, {0x400, 0xcb2, {0x1, 0x1}}, {0x4, 0x9342, {0x3, 0x9}}, {0x7, 0x0, {0x0, 0x100}}, {0x7, 0x400, {0x0, 0x200}}, {0x1, 0x8, {0x2, 0x9}}, {0x400, 0x3, {0x1, 0x793}}, {0x5, 0x3, {0x2, 0x10000}}, {0x19, 0x9, {0x3, 0x4}}, {0x200, 0x81, {0x0, 0x1}}, {0x4, 0xff, {0x3, 0x7}}, {0x8, 0x3, {0x3, 0x4}}, {0x200, 0x8, {0x1, 0xa08}}, {0x4, 0x5, {0x3, 0x4}}, {0x16c6, 0xff80, {0x1, 0x5}}, {0x8f6, 0x3, {0x0, 0x2}}, {0x9, 0x200, {0x1, 0x1}}, {0x3, 0x8, {0x3, 0x8}}, {0x8001, 0x9, {0x2, 0xd6dd}}, {0x3ff, 0x8000, {0x2, 0x3ff}}, {0x4, 0x1ff, {0x2, 0x62974c18}}, {0x7f, 0x436}, {0x800, 0x20, {0x3}}, {0x2c, 0x7, {0x0, 0x100}}, {0x8ef4, 0x1, {0x1, 0x46}}, {0x5, 0x9, {0x1, 0x1}}, {0xfffa, 0x0, {0x3, 0x1}}, {0x7fff, 0xa0a, {0x1, 0x5}}, {0xeab, 0x0, {0x3, 0x800}}, {0x7ff, 0xfe01, {0x2, 0x3f}}, {0x5, 0x100, {0x2, 0x4d}}, {0x4, 0x8, {0x0, 0xb74}}, {0x4, 0x9, {0x3, 0x73}}, {0x8000, 0x7, {0x1, 0x6}}, {0x4, 0x41, {0x0, 0x80000001}}, {0xffc1, 0x53, {0x2, 0x7fffffff}}, {0x4, 0x5, {0x2, 0x7fffffff}}, {0xd343, 0x2, {0x2, 0x6}}, {0x6, 0x9, {0x0, 0x1121}}, {0x5, 0x3ff, {0x1, 0x3}}]}}}, {{0xffffff87, 0x1, {{}, 0x7f, 0x81, 0x9, 0x0, 0x24, 'syz1\x00', "7291093d6783825df29ca0aa69bb87a3e3375661579e20e1d3f5d403eccce04a", "ee46dceaaa029d3e1b3a7905d7993fd744062fe62854ce95aff20f6487ca93bf", [{0x2, 0x51}, {0x8, 0x7fff, {0x2, 0xb1db}}, {0x7fff, 0xff81, {0x0, 0x8001}}, {0x5, 0x1ff, {0x2, 0x3}}, {0x6, 0xa5bf, {0x1, 0x3}}, {0x5, 0x7, {0x1, 0x1}}, {0x5, 0x3, {0x1, 0x8}}, {0x8c, 0x1f, {0x0, 0x877d}}, {0xcf19, 0x7, {0x3}}, {0xfffb, 0x7, {0x2, 0x16f7}}, {0x800, 0x4, {0x0, 0x7f}}, {0x8, 0x9, {0x2, 0x6}}, {0x2, 0xf800, {0x3}}, {0x800, 0x9, {0x1, 0x8}}, {0x3, 0x9, {0x0, 0x7}}, {0x400, 0x40, {0x2, 0x400}}, {0x5, 0x7f, {0x3, 0x8}}, {0xffff, 0x7, {0x3, 0xfff}}, {0x1e, 0xffff, {0x1, 0xfffffffa}}, {0x0, 0xf7, {0x3, 0x7}}, {0x7f, 0x8000, {0x0, 0x5}}, {0x3, 0x9b, {0x3, 0x1}}, {0x7, 0xfffb, {0x0, 0x81}}, {0x4, 0xeb2, {0x0, 0x1f}}, {0x4, 0x401, {0x3}}, {0x1, 0x2, {0x3, 0xaa}}, {0xc3a, 0xd64, {0x0, 0x6}}, {0x2, 0x1, {0x1, 0x3}}, {0x0, 0x3, {0x0, 0xfff}}, {0x4, 0x2, {0x3, 0x1}}, {0x1, 0x71, {0x0, 0x80000001}}, {0xffff, 0x0, {0x1, 0x3}}, {0x3, 0x1ff, {0x2, 0x3}}, {0x401, 0x5, {0x3, 0x8}}, {0x1000, 0xf6b, {0x3, 0x3ff}}, {0x40, 0x8001, {0x1, 0x1}}, {0xb34, 0x3, {0x1, 0x6b4}}, {0x8, 0xffff, {0x0, 0x5}}, {0x7, 0x0, {0x0, 0x3}}, {0x1000, 0x1000, {0x3, 0x41ce1e14}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x40800}, 0x8880) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x8}}) 07:09:59 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) 07:09:59 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1596.570227][T23660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1596.600634][T23664] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1280 sclass=netlink_tcpdiag_socket pig=23664 comm=syz-executor.2 07:09:59 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) getsockname$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000100)=0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) [ 1596.614791][T23660] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:09:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x600, 0x0, 0x8001}}) 07:10:00 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0xc640, 0x3, 0x4, 0x100, 0x4, {}, {0x3, 0x8, 0x5, 0x6, 0x8, 0x20, 'NF/?'}, 0x7, 0x1, @fd, 0x243423ba, 0x0, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$VIDIOC_ENUMAUDIO(r3, 0xc0345641, &(0x7f0000000340)={0x2, "cd4b23f6f4da22963d82e9f45f3e45856401168ebc3a024895479867bf9c8109", 0x0, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) recvmmsg(r4, &(0x7f0000006500), 0x1ce, 0x40010000, &(0x7f0000006700)={0x0, 0x1c9c380}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x2, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x6, r2, 0x1}) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) r8 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000400)) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r9, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r9, 0x80045500, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000180)={0xa, 0x4, 0xfa00, {r7}}, 0xc) 07:10:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd8, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0xb9e2}, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x101140, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000180)={0x81, 0x69e7, 0x69, 0x965f, 0x2}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000340)) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="240000e60000400029802c56600febb1fead52ea470000005200000008000000043e5623b5057fe4be7171ec75d31cb1050000000000000019e796db", @ANYRES32=0x0, @ANYBLOB="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"/289], 0x161}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vsock\x00', 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10) 07:10:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x700, 0x0, 0x8001}}) 07:10:00 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x2, 0x9, 0x3, 0x400, 0x18, 0x8}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b47, &(0x7f0000000100)) 07:10:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1597.104039][T24187] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=24187 comm=syz-executor.2 07:10:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x3e00, 0x0, 0x8001}}) 07:10:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x37f, 0x0, 0x0, 0x28}}) 07:10:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd8, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:00 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0x0}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000003c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r5 = inotify_init1(0x0) r6 = open(&(0x7f0000000380)='./file0\x00', 0x602000, 0x8) dup2(r5, r6) dup2(r5, r4) fchown(r5, r1, r3) keyctl$get_persistent(0x16, r1, 0xffffffffffffffff) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:00 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x4, 0x0, 0x0, 0x4}}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x0, 0x0, 0x9}) 07:10:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x990000, 0x9688, 0x8, r0, 0x0, &(0x7f0000000080)={0x9f099a, 0x4c, [], @string=&(0x7f0000000040)=0x9}}) bind$nfc_llcp(r1, &(0x7f00000002c0)={0x27, 0x1, 0x0, 0x4, 0xf4, 0x8, "cddbe0407b8ffdaa2f8dd16f063551a45ad60011721e9d2ee102b6d8b9b4be2e50cd0849e014c20d1346e830973b5a28af6a251173cc003f00008000", 0x14}, 0xfffffeb3) r2 = syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x2ff, 0x80) write(r2, &(0x7f0000000340)="e842938e5100000020ca70d48530c1108ea0e800001000dacdc498000000004c63c5392897a98793b8f10000000000000059e0cab9af57a84437763248ca78ef66640633a950f3e69739dc8c9f6370c9e27ca9c6212546d4304ac46a721080aecc96ae2ba17776bb714cd2ce9e232d1bc64aad4f74a8ff10c8cce09e26b2b47ebfb199be091a52a98992e31944b4a9290463c5cc170f0190425f3ce83a0509467c7f7e254ed7c6d67c606152d32bad3616", 0xb1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r3, 0x5453, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000140)) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000200)=0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/unix\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r5, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f0000000180)) preadv(r4, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000001c0)=0x2) 07:10:00 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x4000, 0x0, 0x8001}}) 07:10:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0x0}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd8, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) ioctl$TIOCSBRK(r0, 0x5427) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$RTC_WIE_ON(r1, 0x700f) 07:10:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xff00, 0x0, 0x8001}}) 07:10:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000008000aa", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xfffffffffffffd59}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x4}) 07:10:01 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000140)={0xb8, "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"}) 07:10:01 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0x0}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:10:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:01 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000000)={0x8001, {{0xa, 0x4e24, 0xb86, @local, 0x80}}}, 0x88) 07:10:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0x7, 0x4) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x2, 0x8001}}) 07:10:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x3, 0x8001}}) 07:10:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x100, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x1}}) 07:10:02 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000000)="baacfa9a", 0x4) bind$isdn(r1, &(0x7f00000000c0)={0x22, 0xed, 0x2, 0x2, 0xff}, 0x6) 07:10:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x4, 0x8001}}) 07:10:02 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x5, 0x8001}}) 07:10:02 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x2, 0x0, 0x1, 0x7, 0x10}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000019c0)={0x2, 0x6, 0x4, 0xe000, 0x7, {0x0, 0x7530}, {0x1, 0x2, 0x0, 0x7, 0x7, 0xa1, "337ad715"}, 0x1, 0x4, @planes=&(0x7f0000001980)={0x7f, 0xdd65, @mem_offset=0x8, 0x8}, 0x4}) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b0000000500000078040000640300000000000064030000640300006403000098040000980400009804000098040000980400000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec000000000000000000000000000000000000000000000000004800524544495200000000000000000000000000000000fe8000000000000000000000000000aaac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec000000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000100000000ffffffff000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d4150000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000e000000200000000000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000657468315f766c616e000000000000766c616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d41500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400c8000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff0000000000"], 0x4d4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000140)={{{@in=@dev, @in=@loopback}}, {{@in6=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) [ 1599.464156][T26211] __nla_validate_parse: 4 callbacks suppressed [ 1599.464169][T26211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:02 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x4026}, r0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) [ 1599.577085][T26211] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:02 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x6, 0x8001}}) 07:10:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="500000000931b7999568f9caddeeb3b0419c14147e208eaef1747271dcfd437613462571a27ea655c05df9607d9b8ac76f64cb378ff50562c8dbbc1321a3e9dfb4f42e456ab345e06e9052d160d484549734be7ea5fb519e7a75483b9bdbc2fb5d49c4573eaf364fe86e6e7f0c6b3e86ee45d3232ca71a3188da3bade8fb557c9328240776fa5eb832279988f90c3197d9416a"], 0x28}, 0x0) pipe2$9p(&(0x7f0000000180), 0x4800) 07:10:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) 07:10:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) [ 1600.153843][T26809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:03 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1600.206135][T26809] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x8, 0x8001}}) 07:10:03 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) dup2(0xffffffffffffffff, r0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000080)={0x6, 0x2, 0x4, 0x1, 0x9ab, {0x0, 0x2710}, {0x5, 0x2, 0xff, 0xea, 0x2, 0x81, "26200468"}, 0x5, 0x3, @userptr=0x5, 0x8, 0x0, 0xffffffffffffffff}) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000140)) 07:10:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x3e, 0x8001}}) 07:10:03 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x300, 0x8001}}) 07:10:03 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) socketpair(0x4, 0x5, 0x81, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) preadv(r2, &(0x7f00000017c0), 0x3a8, 0x2) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xff, 0x5, 0x3, 0x40, 0x0, 0x4, 0x82210, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x28804, 0x5, 0x9, 0x3, 0x9, 0x1, 0x8}, r1, 0x7, r2, 0x2) 07:10:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x88000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000100)={0x1f, 0x2, 0x1}) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1600.752067][T27375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1600.875347][T27375] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x500, 0x8001}}) 07:10:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5453, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f0000000000)) modify_ldt$write2(0x11, &(0x7f0000000040)={0x7, 0x100000, 0x400, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0xffff}}) 07:10:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd0, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:04 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x600, 0x8001}}) 07:10:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) getpeername$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) [ 1601.334011][T27806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1601.382804][T27806] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:04 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd0, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x700, 0x8001}}) 07:10:04 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x80, 0x0, 0x0, 0x1ff, 0x10}}) 07:10:04 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x0, 0x4, 0x4, 0xcb429dae050d5e2, 0x800, {0x77359400}, {0x5, 0x1, 0x2, 0xfd, 0x6, 0x1, '2ic,'}, 0x8, 0x4, @offset=0x1, 0x2, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x3e00, 0x8001}}) 07:10:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:05 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x3810c1, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000140)=0x8) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4a000, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080), 0x4) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) 07:10:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xd0, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1602.017236][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x4000, 0x8001}}) [ 1602.073083][T28339] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:05 executing program 0: ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0xfffd, 0xb153, 0x0, 0x4, 0xf}}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/udmabuf\x00', 0x2) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="37194275c78382d099e3202d44d064507a79a5e7f8b570fcd0738b32a4293e3f65372c54866af9dab8b19362c7cc3d6006d8a0080381d7c158da470061f2b8c76c4bab7edf79147528ac8eb01302fff688a5f01d54cfb76ee9c44a0e2be46652a8aa740767b86a751720a9de72a275e3ff5f80627a915a683c33364071dff9eed7f2dbc3877d33d170ce4e7a9b53eeda646f6747a6bc4e074d7a4e58114bda00fcf2df9205e982fcbaaabc18a50fc47ad3f2803c9524a5520230dfdc44a5a1fc252de94d134ed488d77a8fd5b83cc97480a2169ee754d6e8d3d1ba7f10ab6c73dca286478e81546d98", 0xe9, 0x5) 07:10:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0xff00, 0x8001}}) 07:10:05 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000003c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r5 = inotify_init1(0x0) r6 = open(&(0x7f0000000380)='./file0\x00', 0x602000, 0x8) dup2(r5, r6) dup2(r5, r4) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000400)={0x3ff, 0xd000}) fchown(r5, r1, r3) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x400, &(0x7f0000000280)={[{@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_off='metacopy=off'}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_on='nfs_export=on'}, {@metacopy_off='metacopy=off'}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_eq={'uid', 0x3d, r1}}, {@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, '&('}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) r7 = socket$inet6(0xa, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x400001, 0x0) sendmsg$inet6(r7, &(0x7f00000001c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0x0) 07:10:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:05 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x0, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1a5bf}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa, 0x1, 'vxcan\x00'}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0xfffd}}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x202000, 0x0) ioctl$VT_WAITACTIVE(r4, 0x5607) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:10:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8003}}) 07:10:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 07:10:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1602.836274][T29070] device vxcan3 entered promiscuous mode 07:10:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x0, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8005}}) 07:10:06 executing program 1: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xffffffffffffff00, 0x2300) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x8881, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0xff}, 0x0, 0x0, r0, 0x0) socket$inet6(0xa, 0x2, 0x0) 07:10:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x0, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8007}}) 07:10:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="08975427"], 0x28}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x10000, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000100)=0x2, 0x4) 07:10:06 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3}}) 07:10:06 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8009}}) 07:10:06 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x0, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 07:10:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="0000080002c382bb20b83a787af46667fc356bf71b05c901134f99f4b13e0cbcb39ad0705b79260395f8b4f2a39543480a420fa18bf96a86d642be9bbeb58427a5a3693531950c84b99daf1ab446d91a17972d1f6900000048939bda2e96d040e0c522aaa7c088bc23067f2fca673f6f930523218069b70daecd19eb026a7e31d66f9a40004d01256c78591fad2141606dab0c7eb5fb20eaa9ce84c744240caf2995698053e139454c59f47b9f81e9357f1bc6475a5410c4299f7b"], 0x28}, 0x0) 07:10:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8010}}) [ 1604.083566][T29716] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 07:10:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x0, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:10:07 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x40002) getsockname$ax25(r1, &(0x7f0000000040)={{0x3, @bcast}, [@netrom, @remote, @rose, @rose, @rose, @rose, @default, @rose]}, &(0x7f00000000c0)=0x48) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) [ 1604.349000][T29716] 8021q: adding VLAN 0 to HW filter on device bond50 07:10:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x2}}) 07:10:07 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:07 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x0, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:07 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = semget(0x3, 0x0, 0x240) semop(r1, &(0x7f00000000c0)=[{0x1, 0x5}, {0x5, 0x2, 0x1000}, {0x2, 0x101, 0x800}], 0x3) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1f}}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:07 executing program 0: r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000040)=0x10, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b47, &(0x7f0000000100)) 07:10:07 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x3}}) 07:10:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}]}, 0x38}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x41}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x70040, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0xffff, 0x3faa}]}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x4}}) 07:10:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4042, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f00000001c0)={0x2d, "4b0b56edf32af7910e4f5c5e65893fe2b288596b35f47a27c7f2adef287ffaaafe6bc4280229dbbbe0658f6ca35130d705855976ab914288e12488b5b40e2be5a038aa08989dfc6393c5ee0fd21d6e366718bd728fc7014729a44a0d009f0530d83ce0db34c33c10b37ec0a4d74d1aca27ab09aca66c776e1fcfd21bacb4fe02"}) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) [ 1605.193706][ T27] audit: type=1400 audit(1579849808.421:95): avc: denied { create } for pid=30665 comm="syz-executor.1" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 07:10:08 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:08 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x5}}) 07:10:08 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}]}, 0x38}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x800) r0 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYBLOB="dfff198d"], 0x28}, 0x4800) r1 = socket$inet6(0xa, 0x3, 0xb8) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/netfilter\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000780)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000007c0)=0x18) r3 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000004c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000100)='dns_resolver\x00', 0x0, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976ede8860ab49c3a4f51ab0124b50c3362201a307d", 0x75, r3) keyctl$KEYCTL_PKEY_QUERY(0x18, r3, 0x0, &(0x7f0000000000)='TIPC\x00', &(0x7f0000000280)) keyctl$update(0x2, r3, &(0x7f0000000180)="d42c894b3399f22b58eef1d9e01a378b95c10233505ff6877071934caef5a044f3b411256b1131e24afc0add9db68fcc002414b077a0d489511ea6b3cbaa898ee1afc9d348c6141befeb2ec80c8c878633b6a863ba8e919c6d35e1f27d0b642ac074805fd282", 0x66) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 07:10:08 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b000000050000007804000064030000000000006403000064030000640300009804000098040000980400009804000098040000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c230730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec00000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000be8000000000000000000000000000aaac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec000000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000100000000ffffffff000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d4150000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000e000000200000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f766c616e000000000000766c616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d41500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400c8000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff004417c8a1213b374ad92a71fb085404e8b3545b5a96eac0e900121dafcfd580e23b8d9a624fe688ac91e6b6e635c8c227af898a6914a935b054452d521cd712fd3d84d03249569c12a8"], 0x4d4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) 07:10:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x6}}) 07:10:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) 07:10:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}]}, 0x38}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000040)={0xd, 0x2, {0x55, 0x7fff, 0x3, {0x6, 0x7}, {0x1, 0x5}, @period={0x58, 0x2, 0x3, 0x5, 0x401, {0x9, 0x1ff, 0xfe11, 0x5}, 0x7, &(0x7f0000000000)=[0x7c, 0x7, 0x8, 0x72, 0x2, 0x80, 0x7f]}}, {0x52, 0x20, 0xef, {0x100, 0x800}, {0x100, 0x4be}, @rumble={0xf9, 0x8}}}) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) 07:10:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x7}}) 07:10:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="608e2135e643581d723790a48f4594169fcfeb72831b931095cba59c"], 0x28}, 0x0) 07:10:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x8}}) 07:10:09 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) fsetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='trusted.overlay.impure\x00', &(0x7f0000000040)='GPL,ppp1wlan1vboxnet1lo[self%\x00', 0x1e, 0xebdc3a307c29ecc4) 07:10:09 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:09 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={[], [], @local}}}}], 0x28}, 0x0) 07:10:09 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x3e}}) [ 1606.840523][T32137] __nla_validate_parse: 8 callbacks suppressed [ 1606.840534][T32137] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x300}}) 07:10:10 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x109200, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x40}}) [ 1606.960884][T32137] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x500}}) 07:10:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0)={0x77359400}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900080032000000fe8000000000000000000000000000bb983a18977cc2a10063205d31d3bce0fbbc314a401b4da8c0de8fa50506dd1939ccf90d1270fdd1aa32401bdfe25c37b26fbc3019f55344c1d2f5f7e3f99a7370e8d1a4a5771f2bea626dc9a3caf64455f2fe6cc32cbacb391b0d38bea8181a5b9672b52cfdb7b8a286c7331c23514e85015843e223c9abe0419809a169752c426b858a84989622ac08fb4d8748a2ced645fe361643f50d164a78b6dd7828cfeb334575b625ed3c11fdd70f81466a7950d6877028661058c10268a610ffda1447e443ec27cc7597dca18d71", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) 07:10:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:10 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b0000000500000078040000640300000000000064030000640300006403000098040000980400009804000098040000980400000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000a400ec00000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aaac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec000000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000100000000ffffffff000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d4150000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000e000000200000000000000000000000000000000fe800000000000000000000000d3788aa5ec187afcbfaeb2fb04b7942fa200aa00000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f766c495847504ddeced6766c616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d41500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400c8000000000000000000000000000000000000000000000000002400"/1264], 0x4d4) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_FREQUENCY(r2, 0xc02c5638, &(0x7f0000000140)={0xcc, 0x5, 0x7fff}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x0, 0x7, 0x0, 0x3, 0x0, 0x101, 0x80, 0x10000, 0x316, 0x7, 0xffffff00, 0x2, 0x9, 0x1, 0x1f, 0x2a, {0x7ff, 0x40}, 0x80, 0x40}}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b47, &(0x7f0000000100)) 07:10:10 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x600}}) 07:10:10 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:10 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:10 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x700}}) 07:10:11 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5337}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000815) r3 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000400000007000000000000000500000700000000000000000000000007000000000000000000000000000000000000000000000000000000000000000c4e00004a0c000000000000010000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/448]) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0}, &(0x7f00000003c0)=0x61) shmctl$SHM_UNLOCK(0x0, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000900)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x3}}, 0x10) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400007) fstat(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f0000ac5000)='./file0\x00', 0xa400295c) r9 = inotify_init1(0x0) r10 = open(&(0x7f0000000380)='./file0\x00', 0x602000, 0x8) dup2(r9, r10) dup2(r9, r8) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fchown(r9, r5, r7) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r12, 0x5453, 0x0) ioctl$TIOCNXCL(r12, 0x540d) write$FUSE_ATTR(r1, &(0x7f0000000840)={0x78, 0x0, 0x1, {0x101, 0x2, 0x0, {0x1, 0x6, 0x8, 0xd57, 0x538f, 0xfffffffffffffff9, 0x7fffffff, 0x1, 0x1000, 0x7fffffff, 0x80, r5, r11, 0x1f, 0x5}}}, 0x78) [ 1607.900999][ T623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x3e00}}) [ 1608.009919][ T623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:11 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0xb8) syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x20d01) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000e00)=ANY=[@ANYBLOB="6e617400000000000000000000200000000000000000000000000000000000001b0000000500000078040000640300000000000064030000640300006403000098040000980400009804000098040000980400000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec00000000000000000000000000f10000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aaac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec000000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000100000000ffffffff000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a3748d309290f7846b80000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d4150000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000e000000200000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f766c616e000000000000766c616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d41500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400c8000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff000000001a634c7c7cc209a5300eb5eb202527116e8b04f40225b1c90283f3c382d31d01bbd0056ffc40a0fccd11b0eefc9e0a5041c366e709faa4faf60701dda3bdc8c1b14197222d7be9c096704d069c9189ebc905032b5c36a1edfc84ea4180e8c8352d1269f96ce50acde775460fa3abff78f021b79057692407d624d1c3d96b9315f7eec29e2d00108c0952f205114e58114495c6457872b8b1f118b35926f9550a02fb35f82256bd160ed5ba46294787ebf30719c9b86b59fbe41ec2e11856b872c182178ae4c053d100bf3319d0cc9df30042c1e1114efecdfef4652da7a79ddbd38e49dd1f4254bfbebe6e95ce7c76afeb7a205c13ac41dca8557ed2eadfff03b7df"], 0x4d4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x4000}}) 07:10:11 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x34}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0xff00}}) [ 1608.473940][ T1046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1608.511673][ T1046] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:11 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x2) write$P9_RLERROR(r0, &(0x7f0000000000)={0xd, 0x7, 0x1, {0x4, 'bdev'}}, 0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b47, &(0x7f0000000100)) 07:10:11 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:10:11 executing program 1: r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50, 0x0, 0x0, 0x0, 0x0, 0x41, 0x20}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_nanosleep(0x1, 0x0, &(0x7f0000000140)={r2, r3+30000000}, &(0x7f0000000240)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[]}, 0x50050) 07:10:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x34}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1608.956277][ T1582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x2}}) 07:10:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:12 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b47, &(0x7f0000000100)) [ 1608.997597][ T1582] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x3}}) 07:10:12 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:12 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x34}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:12 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000240)={0x8001, 0x6, 0x4, 0x4, 0x5, {0x0, 0x7530}, {0x0, 0x0, 0x8, 0x81, 0x3, 0x0, "982600e6"}, 0x0, 0x3, @userptr=0x5, 0xe5, 0x0, r0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@loopback, @in=@loopback}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=[@rthdrdstopts={{0x0, 0x29, 0x37, {0xf, 0x0, [], [@calipso={0x7, 0x0, {0x3, 0x6b, 0x3f, 0x140, [0xffffffff00000, 0x0, 0x1ff, 0x51e, 0x3, 0xba8, 0x7, 0x3]}}, @hao={0xc9, 0x0, @empty}, @pad1, @enc_lim={0x4, 0x1, 0x8d}, @jumbo={0xc2, 0x4, 0x5}]}}}], 0x67}, 0x0) 07:10:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x4}}) [ 1609.594372][ T2037] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1609.645265][ T2037] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x5}}) 07:10:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:13 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x24000010) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x20801, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000100)=""/255) 07:10:13 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0xb16, 0x0, 0x14c, &(0x7f0000ffc000/0x4000)=nil}) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) recvmmsg(r4, &(0x7f0000006500), 0x1ce, 0x40010000, &(0x7f0000006700)={0x0, 0x1c9c380}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) recvmmsg(r6, &(0x7f0000006500), 0x1ce, 0x40010000, &(0x7f0000006700)={0x0, 0x1c9c380}) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="30000a04e1bcc85db4d189f931541db98b0000444bf765f1240644f265c6e6c21f0e5c092ebd48cd2e5018b1f48bda98aec36df6abd4ecec4538b8eadf9589a373f14704840ad58806562a46b151abb8d8c617143696a0a1e80c30956fac8c9e5b3058dff2bf18c563313a43352790d93b037b610a76500e4ec581c723b3cc69867de13156e8e571f788f713053bf49a35b4c09782eb09cfb8b33ff858a2d56cab369eb25b0569d5e498d405a811bfb57792bf66162b8f11b7a03710a0f53d27c7e2e593b05d5e083963a94029a79e80c9af2279aa46ff9e7d76", @ANYRES16=r5, @ANYRES64, @ANYRESOCT=r8, @ANYPTR64, @ANYRES32, @ANYRESHEX=r1], 0x7}, 0x1, 0x0, 0x0, 0x24048055}, 0x200000d0) preadv(r3, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$RTC_UIE_OFF(r3, 0x7004) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r9, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r9, 0xc0305615, &(0x7f0000000000)={0x0, {0x2}}) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x44000, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r10, 0xc06864a2, &(0x7f0000000140)={&(0x7f0000000080)=[0x1f, 0x3, 0x82f3, 0x7fffffff, 0xfe, 0x4, 0x8, 0x5], 0x8, 0x4, 0x8, 0x7, 0x4, 0x9, 0xca0, {0x0, 0xe0, 0x501, 0x8, 0x7, 0x800, 0x1, 0x2, 0x8, 0xff, 0x20, 0x400, 0x9f, 0x20, "00000000010000d963ad53944440d6fc92baa875696a6d25ac57a6d3dec36aae"}}) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x585280, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, &(0x7f0000000200)) ioctl$TIOCL_SETSEL(r11, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x1, 0x401}}) 07:10:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x38}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x6}}) 07:10:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x38}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x7}}) 07:10:13 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 07:10:13 executing program 1: r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x800, 0xa96b, 0xd880, 0x2, 0x3f3d34d3bde4ea50}}) perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x8}}) 07:10:13 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x38}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:13 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1a, 0x1, 0x80) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x8f, "06970ca937dc967978a61a4bf89096f829a33475fb875fcbdbe5ac418a7ad15d02a832b290d0bb989ed0ea0cf03bdd7d9a1d15dc441383b4a993c51bbe4621d84328dc851f99d6a3ea3d2c2c770f5ed9bf2388162d9c87f30a490a5325c5efba74404e00ab6378d879e19e8fc6026886c32e13d7cff3fcbc97cd10a3152f134eced7ec4efda207cd9193f1758ee99e"}, &(0x7f0000000180)=0x97) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={r1, 0x1e30}, 0x8) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x3e}}) 07:10:14 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r4 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x200000, 0x0) r6 = accept4$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000140)={r2, r6, 0x1}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) ioctl$TIOCL_SETSEL(r7, 0x4b47, &(0x7f0000000100)) 07:10:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x38}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x300}}) 07:10:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:14 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb69b4943c3c942f0e1585", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x40000, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0xf, 0x6, 0x401, 0x0, 0x0, {0x9, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0xc0) 07:10:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x500}}) 07:10:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x38}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:14 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xb8) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f00000000c0)={r2, 0x8}, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'veth1_virt_wifi\x00', {0x7}, 0x7f}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x4b47, &(0x7f0000000100)) 07:10:14 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x600}}) 07:10:14 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000000c0)) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x38}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x700}}) 07:10:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x40080, 0x0) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000200)={0x2, {0x2, 0xfffc, 0x3f, 0x4, 0x65c}}) sysinfo(&(0x7f00000000c0)=""/253) [ 1612.026851][ T3905] __nla_validate_parse: 10 callbacks suppressed [ 1612.026863][ T3905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1612.073780][ T3905] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x3e00}}) 07:10:15 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r0, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x1, 0x2}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="0000f6ff"], 0x28}, 0x0) 07:10:15 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r2 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r3 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r4 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000780)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r6, &(0x7f00000017c0), 0x3a8, 0x2) statx(r6, &(0x7f0000000200)='./file0\x00', 0x100, 0x200, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r5, r7, 0x100) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r0, r1, r2, r3, r0], 0x5) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_GET_XCRS(r8, 0x8188aea6, &(0x7f0000000040)={0x2, 0x9, [{0x4, 0x0, 0x52b}, {0x9, 0x0, 0x4}]}) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r9, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r8, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_SG_FREE(r9, 0x40106439, &(0x7f00000000c0)={0x7ff, r10}) 07:10:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0x4000}}) 07:10:15 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:15 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) recvmmsg(r1, &(0x7f0000006500), 0x1ce, 0x40010000, &(0x7f0000006700)={0x0, 0x1c9c380}) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x13, 0xc372b0029f1a682e, 0x801, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x8}, [@nested={0x37, 0x59, 0x0, 0x1, [@generic="716cf6d3c7036b5781b09eae7fb8c1debf51d2f95331c2dcf5409050951f6a0c4987b5be5794118cbf9102", @typed={0x8, 0x52, 0x0, 0x0, @u32=0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x800) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) 07:10:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x38}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1612.594691][ T4483] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=11795 sclass=netlink_tcpdiag_socket pig=4483 comm=syz-executor.0 07:10:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) recvmmsg(r0, &(0x7f0000006500), 0x1ce, 0x40010000, &(0x7f0000006700)={0x0, 0x1c9c380}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00000000f8ccc6312a47907e9b4f35e53fb8709672a0d8f38da01ac551266b391b3c996996e2dfb796dedc46ad6d94aa9b2f0c1d", @ANYRES16=r2, @ANYBLOB="21020000000000000000010000000c0099000000000002000000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00P', @ANYRES16=r2, @ANYBLOB="10002dbd7000fddbdf2512000000060012010700000006001200ffff00000a000600aaaaaaaaaabb00000c004300030000007fffffff0a000600aaaaaaaaaaaa00000600140136a6000017001300e2466d241d83dcb21922de4c0f0eb15db7d159000600b5002e020000"], 0x70}, 0x1, 0x0, 0x0, 0x8880}, 0x20000004) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000000)={0x3bbbb50c, 0x2, 0x101, 0xff}, 0x10) 07:10:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x0, 0xff00}}) 07:10:15 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x658480, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000600)={0x0, 0x101}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000680)={r2}, &(0x7f00000006c0)=0x8) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000100)={[0x7, 0x68, 0x0, 0x20, 0x5, 0x80, 0x1, 0x20, 0x5, 0xfc, 0x4, 0x7fff, 0x5, 0x3, 0x0, 0x2], 0x100000, 0x200}) r3 = getpid() r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) process_vm_readv(r4, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, &(0x7f0000000540)=[{&(0x7f0000000300)=""/232, 0xe8}, {&(0x7f0000000400)=""/57, 0x39}, {&(0x7f0000000440)=""/220, 0xdc}], 0x3, 0x0) sched_setscheduler(r3, 0x5, 0x0) r5 = getpgid(r3) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x20, 0x83}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) [ 1612.640624][ T4484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1612.651014][ T4484] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1612.846847][ T4760] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=29 sclass=netlink_tcpdiag_socket pig=4760 comm=syz-executor.2 07:10:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="c00fdaede7b361cb3fcda747f9db099d99ac39383652ced15256f36511fdaae666b7f015e46baffb85ed576927c9a52efe9f3370df8ee9444e9cbf9f9cb48aff45b5bcc2a9d648706d546384b426a91c6d13fc8708f762de818d5cc84c9d1643c436679a01e62bc656d90b0737fb2c79708ee917da0eee711c1a5f9090e90076e6") ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) 07:10:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) readahead(r1, 0x1, 0x5) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:10:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x38}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5453, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x2) mkdirat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x1ff) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x68d3, 0x9, 0x3, 0x7ff, 0xd, "d7b43f256ae1b0534d9c066f9e08845bf6e20b"}) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000100)={0x2, {0x2, 0xfffe}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000080)='&.lo\x00') 07:10:16 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0)='/dev/vcsu#\x00', 0x101, 0x2000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000100)={0x2}) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r4 = fcntl$dupfd(r2, 0x0, r0) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000140)={0xd9d, 0x1, 'client1\x00', 0x4, "48ea89671381f338", "89b1119fc19eed687cadb8ea595faef2ec43c75a90f7e4ad40067e5352b1d438", 0x800, 0x1f}) close(r3) [ 1613.200699][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1613.270665][ T5011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:16 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:16 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 07:10:16 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8000, 0x0, 0x2}}) 07:10:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b67, &(0x7f0000000000)) 07:10:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x38}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:16 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x6) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000190000000000000000bb", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) clock_nanosleep(0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)) 07:10:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1613.772663][ T5747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4042, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f00000001c0)={0x2d, "4b0b56edf32af7910e4f5c5e65893fe2b288596b35f47a27c7f2adef287ffaaafe6bc4280229dbbbe0658f6ca35130d705855976ab914288e12488b5b40e2be5a038aa08989dfc6393c5ee0fd21d6e366718bd728fc7014729a44a0d009f0530d83ce0db34c33c10b37ec0a4d74d1aca27ab09aca66c776e1fcfd21bacb4fe02"}) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) 07:10:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x1) 07:10:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) [ 1613.858105][ T5747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x9b0000, 0x4, 0xb9b4, r0, 0x0, &(0x7f0000000100)={0x990a66, 0x1cf, [], @p_u32=&(0x7f00000000c0)=0x401}}) r3 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)={0x5, 0x8, 0x4, 0x40, 0x20, {0x0, 0x7530}, {0x2, 0x1, 0xfd, 0x6, 0x1, 0x0, "95be0b60"}, 0x8, 0x3, @fd=r2, 0x7ff, 0x0, r3}) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb560d16e9fb2c60ff946240082328d3efe1e1ad4f30a5ed905344b683ca7a5e17b1b05ff07f946e13fb85ad6092d63af499add9d1fa0057fb3fb4c1add846db1d2b32e2975a8d38cb881a2943ad127771af90a63799342287b7efe48f6b1997e42bccb0a321fb84bb75c87f1048fc4d948a595e2b710a500c0f18bacb65adbef41a95a328b4751427e2fca8a8bf54544b4c07528ed52a9f94093c68a5f32e79b2b35c42ecc664e8b5c3057ae3ce273cf2c32b91785004e7d050867a911a04b0c36b7f8fd3108b041ce4c324ededffde91d0b3e5c6ea3dddc13a51ca91807587e90f6944f65de67b798ae05ccb96ea0e30c034a9a4d18efb71", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0) 07:10:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:17 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x30481, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r2, &(0x7f00000017c0), 0x3a8, 0x2) r3 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x17, &(0x7f0000000780)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000780400006403000000000000640300006403000064030000980400009804000098040000980400009804000005000000000000000000000000000000000000000000000000ed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec00000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aaac141400000000000000000000000000000000000000000000000000000000000000000092233f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec000000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000100000000ffffffff000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d415000000000000000000000000000000000000000000000000000007f000001000000000000000000000000e000000200000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f766c616e000000000000766c616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d41500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400c8000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff00000000a51c91cc5c626eed0000"], 0x4d4) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000200)={0xfffffff, 0x1, 0xfffffffb, r3, 0x0, &(0x7f00000001c0)={0x309, 0xb374, [], @string=&(0x7f0000000180)=0xb4}}) r4 = getpid() sched_setscheduler(r4, 0x5, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, 0x0) r6 = getpid() sched_setscheduler(r6, 0x5, 0x0) r7 = getpgid(r6) r8 = syz_open_procfs(r7, &(0x7f0000000240)='net/dev_mcast\x00') preadv(r8, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$RTC_IRQP_READ(r8, 0x8008700b, &(0x7f0000000080)) socket$unix(0x1, 0x1, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x8000, 0x0, 0x0, 0x0, 0x10}}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000040)=0x1000) 07:10:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:10:17 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4042, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f00000001c0)={0x2d, "4b0b56edf32af7910e4f5c5e65893fe2b288596b35f47a27c7f2adef287ffaaafe6bc4280229dbbbe0658f6ca35130d705855976ab914288e12488b5b40e2be5a038aa08989dfc6393c5ee0fd21d6e366718bd728fc7014729a44a0d009f0530d83ce0db34c33c10b37ec0a4d74d1aca27ab09aca66c776e1fcfd21bacb4fe02"}) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) 07:10:17 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, 0x0, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r10 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1614.521666][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1614.579427][ T6490] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:17 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000540)={0xffffffffffffffff}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000801010000000000080000000000400900010073797a3100000014e104e1bca13f900011000000e6ff014000400000"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001100)=ANY=[@ANYBLOB="14000101000000001200"/20], 0x14}}, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000500), 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) writev(r0, &(0x7f0000001800)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f00000000c0)="bdb9a354556cde86b5a38bdc5694c133724f49bafa4894f3384b96ea2ffe0b84c86e518eff28d59ba143bef072da0b7abda38af50fbd6c0015276250435450f576de91d7789dc5f81cc7b61623e783614c18825981d7d48b7ad1b498fdd89d2febb17f907d674cd3d78257879369965ce9183a2ab3ab5a93cd745b0ff1999a771ae94862b81418234b234cc93160d11d55da2280fb5167c67a42aa474bf5b1f39bfb9d6470b7b3f6045a790deb01b1c80defc5bd7a2372d18b8fa9378081e880b94e3cbe35", 0xc5}, {&(0x7f00000001c0)="540df71d9c", 0x5}, {&(0x7f0000000200)="f16638b1354e082996bd378762b99d7abe4002c9c36a7be0f828bcba1c1c8e5d74c7b23879fa99d26cc5e546520ff65b331bc55e8b5961d854bd6bca52cebfcc67f1538d63711a33fad6e0db3f1c9dad14cff2653a31602a74d5a076a1f5d75716ca3871868cb245a87318162e45e6f2ed7f800e6647ee05243051a01e04dc8fe11164bfe945118b83d59ef29bfcb3862c0d4f1d19368c7885ceb54cbc16e48eddc284bb08d34ae4be2f3acaf7db4fc82f26c95b15ef02687f3a99f7af0d03a7e1289267bada4d89473e146dfc51709e30329bd22e89", 0xd6}, {&(0x7f0000000300)="f170dfc870caa7f9f1ac4ee558a89fd5c4030cdecb348e3f436440f2704a3be91ba0ed23f7860657a6bcd0f93ca0dc94bd131e97f48383f222d3df06aa74f0bd2c804742aae2ec07a0b05c1d52b3f26de47a648b11fcdd0bf3e45753728fda17660c7ee0d8078601564fd00a045cd85a7a2589e3218b2346d7aa789ec60422809f223e104ee64db5a66e79d788fd4dd3b2afe3159e67c2b8c734019dd499eb0c7014fda1a4439ad39e08d1771211261fb0b795d47dca9a498466ba2bc8cbc72f0eb2", 0xc2}, {&(0x7f0000000400)="2f26d676c84a66ae2ac5c41bb9e44ac79badfd2e5184e4de6eeb277c20aca402550d6bba1bd91882ef178fe28bdd4c00037a8572000b0580d26951fd55375480b3bcb6b38b1da90315f21676896eb766a0b65879812ab5322c7f212c", 0x5c}, {&(0x7f0000000480)="74281ea7796e17eb4c0417b0452a9286bd6ea0efa00975e51260ec00e186447f6812d95e14a3ce306e71ee336774cb3cf49e7ee7a4042013d048b74de7f166653dd909cdd0b05f7bc5441a69c09e8cffc859c0d53d1485c12609b0e55198c14c45f77d897f89e0c6a6ef9bdfb72685f7adc9a58db7", 0x75}, {&(0x7f0000001600)="5369f576906ccc00a4fcdb896bffadfb36a705b0f2b6670c980076b598fc932bd9ea66e48a7b0963934a328b9c12c92c46fbc69d0feaf112250a43f5c9db027bc7d89e9a64925ada211fb27735a0d8109723175f40924ff28bf4438cecc8822006881348e182a9e2288fe48cea32e950160b553ef0f0f0330807dfca05d1a554367c9ac0cbc245849cf57d78dc358afdff16eaaf5cf74371c53c574571d48407edb58452493ddaa08a644fc98207c350329ca72a144e8396ef06430bf9e7d158a8b334e0a4463d3c069b986f94f2ea79bc6f1d7b50f3cf329acb184d3210a2d0c5012e36", 0xe4}, {&(0x7f0000001700)="8486cfb067920e0ec262039e6ef96f2fb6cfc9e99f5d5e908b3b96acc860fe692fda9ad1453d148e839745d6d9f0f4f8ddfd8207ce6ec353208a11be6cbc70973f131e01cd0569079888b245e009135f2befb7910a3615b09031697c66c04efa40f872bfea6342b38a7814ac514a48a8f941e4d779ac373dada9823087743d34f43625c8e294be4094322da7c4ff775727acc2d869f3a55eb21cde3a64f0e5784d632ede56925038537efb40b67ab00d0c2049f2acca6019686ceb3e67cf099c45", 0xc1}], 0x9) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f00000018c0)=""/44, &(0x7f0000001900)=0x2c) sendmsg$inet6(r3, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x28}, 0x0) 07:10:17 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$TIOCL_SETSEL(r1, 0x4b47, &(0x7f0000000100)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x22) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r4, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x64, 0xac, "1ad77f2f223e29174c1e2fd537df71ef6c8be43e344f39f0957279701d04cc255314937f157bd7daf2ba8726429620a05069a7be3fc9ac99a363bfc63e09d80e42e138e0dd4e3d7cca9393f9a1c3e4179b57493ed0b43ded1fcd529da9b1abfe"}]}, 0x78}, 0x1, 0x0, 0x0, 0x5}, 0x40000c0) [ 1614.859607][ T27] audit: type=1400 audit(1579849818.071:96): avc: denied { getopt } for pid=6864 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 07:10:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x2) setns(r1, 0x0) 07:10:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4042, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f00000001c0)={0x2d, "4b0b56edf32af7910e4f5c5e65893fe2b288596b35f47a27c7f2adef287ffaaafe6bc4280229dbbbe0658f6ca35130d705855976ab914288e12488b5b40e2be5a038aa08989dfc6393c5ee0fd21d6e366718bd728fc7014729a44a0d009f0530d83ce0db34c33c10b37ec0a4d74d1aca27ab09aca66c776e1fcfd21bacb4fe02"}) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) 07:10:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, 0x0, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r10 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0) preadv(r0, &(0x7f00000017c0), 0x3a8, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x11a, 0x10400) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000000180)={0x1000, 0x3, 0x2, 0x400, 0x18, "108fe19c5c5fff49551f1de1161538d78a6b7b"}) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:18 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x900, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002580)=0x0, &(0x7f00000025c0)=0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00110400040405001c0012800000b179c71a0000000000000000048008000a00", @ANYRES32=r8, @ANYBLOB], 0x44}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}}, 0x0) r13 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r13, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) getpeername$packet(r13, &(0x7f0000002740)={0x11, 0x0, 0x0}, &(0x7f0000002780)=0x14) r15 = socket$netlink(0x10, 0x3, 0x0) r16 = socket$netlink(0x10, 0x3, 0x0) r17 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r18, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r18}]}, 0x44}}, 0x0) r19 = socket$netlink(0x10, 0x3, 0x0) r20 = socket$netlink(0x10, 0x3, 0x0) r21 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r21, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r20, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r22, @ANYBLOB="01000000000000001c3a0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r19, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r22}]}, 0x44}}, 0x0) r23 = socket$netlink(0x10, 0x3, 0xc) r24 = socket$netlink(0x10, 0x3, 0x0) r25 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r25, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r25, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r24, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r26, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r23, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r26}]}, 0x44}}, 0x0) r27 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r27, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r28 = socket$netlink(0x10, 0x3, 0x0) r29 = socket$netlink(0x10, 0x3, 0x0) r30 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r30, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r30, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r29, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r31, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r28, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010001fff0000b3f90000000000000000", @ANYRES32=0x0, @ANYBLOB="00110400040405001c0012800000010000000000000000000000028008000a00", @ANYRES32=r31, @ANYBLOB], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r27, 0x8933, &(0x7f00000039c0)={'veth0_to_team\x00', r31}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003a40)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000003dc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003a80)=ANY=[@ANYBLOB="22f54ea0", @ANYRES16=r1, @ANYBLOB="020029bd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b40002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="7c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004001cdf0000080007000000000008000100", @ANYRES32=r18, @ANYBLOB="f00002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r22, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400b900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000008000100", @ANYRES32=r26, @ANYBLOB="800002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r32, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400ffff000008000600", @ANYRES32=r33, @ANYBLOB], 0x2d4}, 0x1, 0x0, 0x0, 0x64}, 0x4040) r34 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r34, 0x4b47, &(0x7f0000000100)) ioctl$KDSKBMETA(r34, 0x4b63, &(0x7f0000000000)=0x4) 07:10:18 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x321002, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:10:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1615.363279][ T7213] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 07:10:18 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4042, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f00000001c0)={0x2d, "4b0b56edf32af7910e4f5c5e65893fe2b288596b35f47a27c7f2adef287ffaaafe6bc4280229dbbbe0658f6ca35130d705855976ab914288e12488b5b40e2be5a038aa08989dfc6393c5ee0fd21d6e366718bd728fc7014729a44a0d009f0530d83ce0db34c33c10b37ec0a4d74d1aca27ab09aca66c776e1fcfd21bacb4fe02"}) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:18 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, 0x0, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r10 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1615.591312][ T7213] 8021q: adding VLAN 0 to HW filter on device bond4 07:10:18 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x2) mmap$fb(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000009, 0x13, r0, 0xa3000) perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:18 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) 07:10:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4042, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f00000001c0)={0x2d, "4b0b56edf32af7910e4f5c5e65893fe2b288596b35f47a27c7f2adef287ffaaafe6bc4280229dbbbe0658f6ca35130d705855976ab914288e12488b5b40e2be5a038aa08989dfc6393c5ee0fd21d6e366718bd728fc7014729a44a0d009f0530d83ce0db34c33c10b37ec0a4d74d1aca27ab09aca66c776e1fcfd21bacb4fe02"}) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x9}}) 07:10:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4042, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:19 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x8010) 07:10:19 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x2) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000780)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b0000000500000078040000640300000000000064030000640300006403000098040000980400009804000098040000980400000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec00000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aaac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec000000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000100000000ffffffff000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d4150000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000e000000200000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f766c616e000000000000766c616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009300000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d41500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400c8000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @multicast2}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @loopback}}}, 0x84) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0x800, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)={0x7fff, 0x10, [0x6, 0x0, 0x7, 0x6]}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000000c0)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001, 0x9, 0x4}}) [ 1616.185150][ T7941] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 07:10:19 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x3}}) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b0000000500000078040000640300000000000064030000640300006403000098040000980400009804000098040000980400000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec00000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aaac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec000000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000100000000ffffffff000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d4150000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000e000000200000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f766c616e000000000000766c616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d41500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400c8000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d4) r2 = dup3(r0, r1, 0x80000) setsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000140)="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", 0x1000) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x200400, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r3) [ 1616.472363][ T7941] 8021q: adding VLAN 0 to HW filter on device bond51 07:10:19 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4042, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') socket(0x11, 0x800000003, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b47, &(0x7f0000000100)) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000180)={0x5, @raw_data="19a6152651ee3d5aaffb48ad0f7d24ec6fcc5c23cde9cafc0da59c65f0d6fd90bb4d82abdbd95bac79b1ab4e521dd5ab1ba677086c6ef51dbf2a1f52f197c9bfd5665757b1de41f7aa267ce208cd335bce323198eb06581b8c131dd7f2b7cc1e7b33142e70a6065d5bb90db2db8e8dd3f947768df88dabcb144881e133268a4649f561a952c9aae1278ae2d7c3a40f1f7d56d4734c7d16450c1c55ef10281712b4e62c7d7bd2acbfecb7a0fd0e1e7e2648bb661008ada95c87f2c189a3f14032fbe8f3da8b104ea5"}) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r4 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000280)=0x8, 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) 07:10:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:19 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20048800}, 0x4004040) 07:10:20 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getxattr(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)=@random={'trusted.', 'self@\x00'}, &(0x7f0000000a80)=""/226, 0xe2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/dlm-control\x00', 0x2c0102, 0x0) clock_gettime(0x0, &(0x7f0000000900)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000980)={0x6, 0x8, 0x4, 0xe000, 0x7974, {r1, r2/1000+10000}, {0x2, 0x8, 0x3, 0x2, 0x40, 0x1, "3e24a8d1"}, 0x5, 0x3, @planes=&(0x7f0000000940)={0xcb, 0x100, @mem_offset=0x9d}}) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x88, 0x0, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x226}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041054}, 0x24044000) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x4001, 0x0) r5 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0xff, @remote, 0x4c1}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x2a}, 0x59747e95}, @in6={0xa, 0x4e24, 0x80000000, @mcast1, 0x3}, @in={0x2, 0x4e21, @rand_addr=0x124}], 0xa0) r6 = socket$netlink(0x10, 0x3, 0x4) write(r6, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) recvmmsg(r6, &(0x7f0000006500), 0x1ce, 0x40010000, &(0x7f0000006700)={0x0, 0x1c9c380}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x20, 0x2, 0x8, 0xe05, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000140)='trustedwlan0.vboxnet1\\wlan0]-security\x00') 07:10:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4042, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:20 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x804}}) socket$bt_hidp(0x1f, 0x3, 0x6) 07:10:20 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) [ 1617.116593][ T9082] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2050 sclass=netlink_tcpdiag_socket pig=9082 comm=syz-executor.1 07:10:20 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000040)) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/sco\x00') bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:10:20 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:20 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xa30}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) [ 1617.467955][ T9253] __nla_validate_parse: 8 callbacks suppressed [ 1617.467967][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:20 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x400, 0x0) ioctl$TCSETSF(r0, 0x5453, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1}}) [ 1617.555963][ T9253] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:20 executing program 5: prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:10:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) 07:10:21 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x800}}) umount2(&(0x7f0000000080)='./file0\x00', 0x1) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x7fffffff, 0x4, 0x8}, 0xc) 07:10:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:21 executing program 2: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:21 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x80000, 0x0) 07:10:21 executing program 1: r0 = socket$inet6(0xa, 0x80000, 0xfc) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000180)={0xa, 0x4e1f, 0x1, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[]}, 0x10) 07:10:21 executing program 2: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:21 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:21 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x1, 0x0, 0x0, 0xffff, 0x2}}) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b0000000500000078040000640300000000000064030000640300006403000098040000980400009804000098040000980400000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec00000000000000000000000000000000000000000000000000480052454449524543540000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aaac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec000000000000000000000000000000000000000000000000004800534e4154000000000000000000000000000000000000000000000000000100000000ffffffff000000000000000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff00000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d4150000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000e000000200000000000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f766c616e000000000000766c616e3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400ec0000000000000000000000000000000000000000000000000048004e45544d41500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a400c8000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4d4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x3}, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0) 07:10:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:21 executing program 2: write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:21 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0xacc8f0d6539764eb, 0x9, 0x66cc, 0x2}, r0, 0x0, 0xffffffffffffffff, 0xb) r1 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) [ 1618.688283][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:22 executing program 5: prctl$PR_MCE_KILL_GET(0x22) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x81, 0x0, 0x8001}}) [ 1618.775696][T10571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r10 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20240, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) 07:10:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x100, 0x0) write$6lowpan_enable(r1, &(0x7f0000000100)='0', 0x1) 07:10:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = getpgrp(r1) r3 = getpgrp(0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x80, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x6}) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f00000001c0)="8236c6b49625877480e411c92aa15462f61876840c2b068f88a39890d44222a3038eb3fa794e54093d20fae858d07ee38194d11a73dfbc23400bc3faa38a25df9e0ebf4f73d102fb9aa250ad602b33869611e8d30e2263", 0x57}) 07:10:22 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r10 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:22 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x0, 0x8b59}}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x800, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2100, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080)=0xffff7fff, 0x4) write$UHID_INPUT(r3, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006) r4 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x490, 0x1e0, 0xf0, 0xf0, 0x2d0, 0x0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @port, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [0x0, 0x0, 0x0, 0xff], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) ftruncate(r4, 0x4) 07:10:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:22 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x121000, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:22 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xd4240) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 07:10:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r10 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:23 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x18, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) [ 1619.815283][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1619.875354][T11911] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:23 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x0, 0x8, 0x1}}) 07:10:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 07:10:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000bb", @ANYRES32=0x0, @ANYBLOB="00000020de90a000ff27bb42d200"], 0x28}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x2) mq_notify(r1, &(0x7f0000000200)={0x0, 0x31, 0x2, @thr={&(0x7f0000000100)="12a0fe911806e32c9251ae881838ad7f0ea987f0e9e69ad640d35359284fc490d0118bbcb4743b77c309b8e100f6e21baabe37430ee88e75a2ce2b47727ace60e25dda755d19c112ea6922bcd4288ae963d127f90c44550285cba0db2d9240f3a937035f4ca1f82732fd3e272cac44acdd53d8587a", &(0x7f0000000180)="b2a9bbf3da58a494a5e391e0738d7699fcebb64a5ddddb10b6147fa2e6ab89a43b5af91212b85af9a8aa225ed2033801b92b0bd153b38737ce35648bb9bbd0a1f8c7"}}) 07:10:23 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x6, 0x1, 0x4, 0x4000000, 0x9, {}, {0x2, 0x2, 0xff, 0x0, 0x3, 0x9, "ccbe037d"}, 0x6, 0x1, @userptr=0x8, 0x0, 0x0, 0xffffffffffffffff}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000100)=r3) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0xffffffffffff0000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 07:10:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:23 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000040)={0x10001, 0x7ff}) ioctl$TIOCL_SETSEL(r2, 0x4b47, &(0x7f0000000080)={0x2, {0x2, 0x0, 0x4}}) 07:10:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0x0}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r10 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) [ 1620.501246][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) accept(0xffffffffffffffff, &(0x7f00000000c0)=@can={0x1d, 0x0}, &(0x7f0000000000)=0x80) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@remote, 0xb, r1}) [ 1620.551602][T12589] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 07:10:23 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x8000, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:10:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, 0x0, 0x0) 07:10:23 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0x0}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r10 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:23 executing program 0: r0 = creat(&(0x7f0000000000)='.\x00', 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000d0}, 0x80) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b47, &(0x7f0000000100)) 07:10:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x80, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x171, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x38}}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x233}}], 0x18}, 0x0) 07:10:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x220000, 0x0) ioctl$TCSETSF(r1, 0x5453, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000780)={0xaa, "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"}) r2 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000140)=@req={0x28, &(0x7f0000000180)={'veth1_to_bond\x00', @ifru_addrs=@sco={0x1f, @none}}}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') preadv(r3, &(0x7f00000017c0), 0x3a8, 0x2) ioctl$SNDCTL_DSP_GETIPTR(r3, 0x800c5011, &(0x7f0000000040)) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:10:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={0x0}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r10 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r10, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000240)={'NETMAP\x00'}, &(0x7f0000000280)=0x1e) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xad, 0xa, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x5}}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}}]}, @IPSET_ATTR_ADT={0x5c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xff9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x32}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xcc}, 0x1, 0x0, 0x0, 0x60008000}, 0x2000c044) 07:10:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0xc4, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:24 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:24 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x5a, &(0x7f0000000040)="94d9ebb33b6a6671025cb7484b04464aa0d208f44710a590f0bec36f94b5a6fa8d2480907120bd19256f7b391183937bf407a3e46e7366a81dc40ea2e217d2055d2d21a843f434bee8777d079072761fe5bf8e61677f80e27f7e", 0x91, 0x0, &(0x7f00000000c0)="dd9f1f94ba613bd667bf4f602366a17a65b4c113100d902244a8101d5ca520feea84f6a4865e00a5da1f313801a175666b479aa6fa60cbe59fc34770d891769f324a9a4fc48847a76d0fc486367f833cddd17e6a9191b5d6f74aad1ef7e2a59b330ef4fd130f0d919af0db46708b58b13fd07f162c3bd2013d3eeb5e807960f96f0677ddca0e4cadd2f35876f6a100d0b0"}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) 07:10:24 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}, 0x0) 07:10:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x81, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:24 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) 07:10:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x0, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r5, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xe4, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x100}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x4c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x3}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x7f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0x89}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x35}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x27}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x4800}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x7}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xaf}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x401}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0xef}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x301101, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r10}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x40) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) r11 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r11, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:25 executing program 1: r0 = creat(&(0x7f0000000000)='.\x00', 0x100) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000d0}, 0x80) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x4b47, &(0x7f0000000100)) 07:10:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:25 executing program 0: syz_open_dev$tty1(0xc, 0x4, 0x1) 07:10:25 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2c2001, 0x0) ioctl$TCSETSF(r1, 0x5453, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) r3 = getpgrp(r2) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000140)=r3) 07:10:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x7, 0x8001}}) syncfs(r0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) r2 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r2, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r5, 0x107, 0xf, &(0x7f0000000000)="a2e6fa9a", 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r6, 0x221, 0x0, 0x0, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x2}}]}, 0x20}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0xb8) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41100, 0x50404}, [@IFLA_LINKINFO={0x1c}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', r11}) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x21}}]}, 0x40}}, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000280)=@nat={'nat\x00', 0x1b, 0x5, 0x478, 0x364, 0x0, 0x364, 0x364, 0x364, 0x498, 0x498, 0x498, 0x498, 0x498, 0x5, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv6=@local, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa4, 0xec}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote}}}, {{@uncond, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@loopback, @ipv4=@multicast2, @gre_key, @icmp_id}}}, {{@ipv6={@local, @loopback, [], [], 'veth1_vlan\x00', 'vlan0\x00'}, 0x0, 0xa4, 0xec}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@empty, @ipv6=@mcast1, @gre_key, @gre_key}}}], {{[], 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4d4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) r12 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TLS_RX(r12, 0x6, 0x2, &(0x7f00000003c0)=@gcm_128={{0x7}, "3790016efa30b345", "ef9e72b174174d6bf6807ea1e20acd6f", "89fe213e", "d0758aa275815839"}, 0x28) 07:10:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x0, 0x0, 0x8001}}) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) r2 = getpgrp(r1) r3 = getpgrp(0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x80, 0x0) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r4, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x6}) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r5, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f00000001c0)="8236c6b49625877480e411c92aa15462f61876840c2b068f88a39890d44222a3038eb3fa794e54093d20fae858d07ee38194d11a73dfbc23400bc3faa38a25df9e0ebf4f73d102fb9aa250ad602b33869611e8d30e2263", 0x57}) 07:10:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1e1, 0x40, 0x314, 0x34f, 0x0, 0x38, 0x2, 0x3, 0x1, 0xef25}, [{0x70000000, 0x7f, 0x401, 0x7f, 0x7a1f, 0x80000000, 0xbb5, 0x6}], "8dea89633775c93a605cb5e97b23d7bfb68def7c32c4820e643e726280a3a7b193be7d2e3963171434ed7a26934bda38b13f80db4b30d55d2ae5a660ef5f5a92d1eb302108d7547459ced0d9e1ed7d52cbabed64f647ebd53b7104cfa2b0d85040bd1ddeb8f3aff173fba05ea3a628ff54663a7374f00cb871e15e2cb49975d0fd6c5bfb0d94c76fc6ec7450649b23f13bdc66c809cddb896045bb67e200fa8e6d1c111663d6530b00d731ce3860ea31aaba28dcc682f8d42eb52df28dae4a1505", [[], [], [], [], []]}, 0x639) 07:10:25 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x4b47, &(0x7f0000000100)) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) [ 1622.207532][T14344] ================================================================== [ 1622.207659][T14344] BUG: KASAN: use-after-free in n_tty_receive_buf_common+0x270f/0x2b70 [ 1622.207675][T14344] Read of size 1 at addr ffff88801fff01a3 by task syz-executor.5/14344 [ 1622.207680][T14344] [ 1622.207701][T14344] CPU: 1 PID: 14344 Comm: syz-executor.5 Not tainted 5.5.0-rc7-syzkaller #0 [ 1622.207711][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.207716][T14344] Call Trace: [ 1622.207739][T14344] dump_stack+0x197/0x210 [ 1622.207761][T14344] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 1622.207788][T14344] print_address_description.constprop.0.cold+0xd4/0x30b [ 1622.207804][T14344] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 1622.207822][T14344] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 1622.207838][T14344] __kasan_report.cold+0x1b/0x41 [ 1622.207859][T14344] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 1622.207876][T14344] kasan_report+0x12/0x20 [ 1622.207893][T14344] __asan_report_load1_noabort+0x14/0x20 [ 1622.207911][T14344] n_tty_receive_buf_common+0x270f/0x2b70 [ 1622.207925][T14344] ? __kasan_check_read+0x11/0x20 [ 1622.207964][T14344] n_tty_receive_buf2+0x34/0x40 [ 1622.207981][T14344] tty_ldisc_receive_buf+0xad/0x1c0 [ 1622.207995][T14344] ? add_wait_queue+0x112/0x170 [ 1622.208012][T14344] ? n_tty_receive_buf_common+0x2b70/0x2b70 [ 1622.208030][T14344] paste_selection+0x1ff/0x460 [ 1622.208051][T14344] ? vcs_remove_sysfs+0x60/0x60 [ 1622.208067][T14344] ? lock_downgrade+0x920/0x920 [ 1622.208159][T14344] ? wake_up_q+0x140/0x140 [ 1622.208195][T14344] tioclinux+0x133/0x480 [ 1622.208213][T14344] vt_ioctl+0x1a41/0x26d0 [ 1622.208232][T14344] ? complete_change_console+0x3a0/0x3a0 [ 1622.208248][T14344] ? lock_downgrade+0x920/0x920 [ 1622.208265][T14344] ? rwlock_bug.part.0+0x90/0x90 [ 1622.208285][T14344] ? tomoyo_path_number_perm+0x214/0x520 [ 1622.208306][T14344] ? find_held_lock+0x35/0x130 [ 1622.208325][T14344] ? tomoyo_path_number_perm+0x214/0x520 [ 1622.208345][T14344] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1622.208365][T14344] ? tty_jobctrl_ioctl+0x50/0xd40 [ 1622.208380][T14344] ? complete_change_console+0x3a0/0x3a0 [ 1622.208398][T14344] tty_ioctl+0xa37/0x14f0 [ 1622.208418][T14344] ? tty_vhangup+0x30/0x30 [ 1622.208434][T14344] ? tomoyo_path_number_perm+0x454/0x520 [ 1622.208454][T14344] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1622.208470][T14344] ? tomoyo_path_number_perm+0x25e/0x520 [ 1622.208490][T14344] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1622.208516][T14344] ? ___might_sleep+0x163/0x2c0 [ 1622.208539][T14344] ? tty_vhangup+0x30/0x30 [ 1622.208558][T14344] do_vfs_ioctl+0x977/0x14e0 [ 1622.208579][T14344] ? compat_ioctl_preallocate+0x220/0x220 [ 1622.208596][T14344] ? selinux_file_mprotect+0x620/0x620 [ 1622.208610][T14344] ? __fget+0x37f/0x550 [ 1622.208631][T14344] ? ksys_dup3+0x3e0/0x3e0 [ 1622.208648][T14344] ? ns_to_kernel_old_timeval+0x100/0x100 [ 1622.208670][T14344] ? tomoyo_file_ioctl+0x23/0x30 [ 1622.208685][T14344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1622.208712][T14344] ? security_file_ioctl+0x8d/0xc0 [ 1622.208732][T14344] ksys_ioctl+0xab/0xd0 [ 1622.208754][T14344] __x64_sys_ioctl+0x73/0xb0 [ 1622.208773][T14344] do_syscall_64+0xfa/0x790 [ 1622.208794][T14344] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1622.208808][T14344] RIP: 0033:0x45b349 [ 1622.208826][T14344] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1622.208836][T14344] RSP: 002b:00007f5026316c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1622.208852][T14344] RAX: ffffffffffffffda RBX: 00007f50263176d4 RCX: 000000000045b349 [ 1622.208864][T14344] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 1622.208874][T14344] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1622.208884][T14344] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1622.208895][T14344] R13: 000000000000054d R14: 00000000004c695b R15: 000000000075bf2c [ 1622.208914][T14344] [ 1622.208922][T14344] Allocated by task 14275: [ 1622.208939][T14344] save_stack+0x23/0x90 [ 1622.208957][T14344] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1622.208974][T14344] kasan_kmalloc+0x9/0x10 [ 1622.208994][T14344] __kmalloc+0x163/0x770 [ 1622.209010][T14344] set_selection_kernel+0x872/0x13b0 [ 1622.209023][T14344] set_selection_user+0x95/0xd9 [ 1622.209041][T14344] tioclinux+0x11c/0x480 [ 1622.209054][T14344] vt_ioctl+0x1a41/0x26d0 [ 1622.209070][T14344] tty_ioctl+0xa37/0x14f0 [ 1622.209084][T14344] do_vfs_ioctl+0x977/0x14e0 [ 1622.209098][T14344] ksys_ioctl+0xab/0xd0 [ 1622.209112][T14344] __x64_sys_ioctl+0x73/0xb0 [ 1622.209127][T14344] do_syscall_64+0xfa/0x790 [ 1622.209143][T14344] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1622.209147][T14344] [ 1622.209153][T14344] Freed by task 14395: [ 1622.209164][T14344] save_stack+0x23/0x90 [ 1622.209176][T14344] __kasan_slab_free+0x102/0x150 [ 1622.209188][T14344] kasan_slab_free+0xe/0x10 [ 1622.209198][T14344] kfree+0x10a/0x2c0 [ 1622.209211][T14344] set_selection_kernel+0x88f/0x13b0 [ 1622.209223][T14344] set_selection_user+0x95/0xd9 [ 1622.209237][T14344] tioclinux+0x11c/0x480 [ 1622.209247][T14344] vt_ioctl+0x1a41/0x26d0 [ 1622.209260][T14344] tty_ioctl+0xa37/0x14f0 [ 1622.209272][T14344] do_vfs_ioctl+0x977/0x14e0 [ 1622.209284][T14344] ksys_ioctl+0xab/0xd0 [ 1622.209305][T14344] __x64_sys_ioctl+0x73/0xb0 [ 1622.209323][T14344] do_syscall_64+0xfa/0x790 [ 1622.209340][T14344] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1622.209345][T14344] [ 1622.209359][T14344] The buggy address belongs to the object at ffff88801fff0000 [ 1622.209359][T14344] which belongs to the cache kmalloc-32k of size 32768 [ 1622.209373][T14344] The buggy address is located 419 bytes inside of [ 1622.209373][T14344] 32768-byte region [ffff88801fff0000, ffff88801fff8000) [ 1622.209378][T14344] The buggy address belongs to the page: [ 1622.209393][T14344] page:ffffea00007ffc00 refcount:1 mapcount:0 mapping:ffff8880aa402540 index:0x0 compound_mapcount: 0 [ 1622.209418][T14344] raw: 00fffe0000010200 ffffea00007f6808 ffff8880aa401d48 ffff8880aa402540 [ 1622.209437][T14344] raw: 0000000000000000 ffff88801fff0000 0000000100000001 0000000000000000 [ 1622.209446][T14344] page dumped because: kasan: bad access detected [ 1622.209449][T14344] [ 1622.209454][T14344] Memory state around the buggy address: [ 1622.209466][T14344] ffff88801fff0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1622.209478][T14344] ffff88801fff0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1622.209489][T14344] >ffff88801fff0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1622.209495][T14344] ^ [ 1622.209506][T14344] ffff88801fff0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1622.209518][T14344] ffff88801fff0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1622.209523][T14344] ================================================================== [ 1622.209529][T14344] Disabling lock debugging due to kernel taint [ 1622.221428][T14344] Kernel panic - not syncing: panic_on_warn set ... [ 1622.221453][T14344] CPU: 1 PID: 14344 Comm: syz-executor.5 Tainted: G B 5.5.0-rc7-syzkaller #0 [ 1622.221462][T14344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1622.221468][T14344] Call Trace: [ 1622.221496][T14344] dump_stack+0x197/0x210 [ 1622.221586][T14344] panic+0x2e3/0x75c [ 1622.221601][T14344] ? add_taint.cold+0x16/0x16 [ 1622.221624][T14344] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 1622.221642][T14344] ? preempt_schedule+0x4b/0x60 [ 1622.221657][T14344] ? ___preempt_schedule+0x16/0x18 [ 1622.221673][T14344] ? trace_hardirqs_on+0x5e/0x240 [ 1622.221689][T14344] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 1622.221702][T14344] end_report+0x47/0x4f [ 1622.221716][T14344] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 1622.221727][T14344] __kasan_report.cold+0xe/0x41 [ 1622.221742][T14344] ? n_tty_receive_buf_common+0x270f/0x2b70 [ 1622.221755][T14344] kasan_report+0x12/0x20 [ 1622.221768][T14344] __asan_report_load1_noabort+0x14/0x20 [ 1622.221782][T14344] n_tty_receive_buf_common+0x270f/0x2b70 [ 1622.221793][T14344] ? __kasan_check_read+0x11/0x20 [ 1622.221816][T14344] n_tty_receive_buf2+0x34/0x40 [ 1622.221829][T14344] tty_ldisc_receive_buf+0xad/0x1c0 [ 1622.221840][T14344] ? add_wait_queue+0x112/0x170 [ 1622.221854][T14344] ? n_tty_receive_buf_common+0x2b70/0x2b70 [ 1622.221867][T14344] paste_selection+0x1ff/0x460 [ 1622.221879][T14344] ? vcs_remove_sysfs+0x60/0x60 [ 1622.221891][T14344] ? lock_downgrade+0x920/0x920 [ 1622.221902][T14344] ? wake_up_q+0x140/0x140 [ 1622.221919][T14344] tioclinux+0x133/0x480 [ 1622.221930][T14344] vt_ioctl+0x1a41/0x26d0 [ 1622.221944][T14344] ? complete_change_console+0x3a0/0x3a0 [ 1622.221955][T14344] ? lock_downgrade+0x920/0x920 [ 1622.221970][T14344] ? rwlock_bug.part.0+0x90/0x90 [ 1622.221986][T14344] ? tomoyo_path_number_perm+0x214/0x520 [ 1622.221997][T14344] ? find_held_lock+0x35/0x130 [ 1622.222012][T14344] ? tomoyo_path_number_perm+0x214/0x520 [ 1622.222028][T14344] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 1622.222043][T14344] ? tty_jobctrl_ioctl+0x50/0xd40 [ 1622.222055][T14344] ? complete_change_console+0x3a0/0x3a0 [ 1622.222071][T14344] tty_ioctl+0xa37/0x14f0 [ 1622.222087][T14344] ? tty_vhangup+0x30/0x30 [ 1622.222103][T14344] ? tomoyo_path_number_perm+0x454/0x520 [ 1622.222122][T14344] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1622.222137][T14344] ? tomoyo_path_number_perm+0x25e/0x520 [ 1622.222155][T14344] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1622.222174][T14344] ? ___might_sleep+0x163/0x2c0 [ 1622.222192][T14344] ? tty_vhangup+0x30/0x30 [ 1622.222208][T14344] do_vfs_ioctl+0x977/0x14e0 [ 1622.222225][T14344] ? compat_ioctl_preallocate+0x220/0x220 [ 1622.222241][T14344] ? selinux_file_mprotect+0x620/0x620 [ 1622.222253][T14344] ? __fget+0x37f/0x550 [ 1622.222270][T14344] ? ksys_dup3+0x3e0/0x3e0 [ 1622.222286][T14344] ? ns_to_kernel_old_timeval+0x100/0x100 [ 1622.222312][T14344] ? tomoyo_file_ioctl+0x23/0x30 [ 1622.222328][T14344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1622.222341][T14344] ? security_file_ioctl+0x8d/0xc0 [ 1622.222354][T14344] ksys_ioctl+0xab/0xd0 [ 1622.222366][T14344] __x64_sys_ioctl+0x73/0xb0 [ 1622.222380][T14344] do_syscall_64+0xfa/0x790 [ 1622.222398][T14344] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1622.222408][T14344] RIP: 0033:0x45b349 [ 1622.222424][T14344] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1622.222432][T14344] RSP: 002b:00007f5026316c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1622.222447][T14344] RAX: ffffffffffffffda RBX: 00007f50263176d4 RCX: 000000000045b349 [ 1622.222456][T14344] RDX: 0000000020000040 RSI: 000000000000541c RDI: 0000000000000003 [ 1622.222464][T14344] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1622.222471][T14344] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1622.222478][T14344] R13: 000000000000054d R14: 00000000004c695b R15: 000000000075bf2c [ 1622.224104][T14344] Kernel Offset: disabled