taction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (fail_nth: 7)

17:12:07 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0xff000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1518.618030][T13909] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1518.679122][T13947] FAULT_INJECTION: forcing a failure.
[ 1518.679122][T13947] name failslab, interval 1, probability 0, space 0, times 0
[ 1518.691808][T13947] CPU: 0 PID: 13947 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller-00235-g22da5264abf4-dirty #0
[ 1518.702836][T13947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1518.712900][T13947] Call Trace:
[ 1518.716177][T13947]  <TASK>
[ 1518.719103][T13947]  dump_stack_lvl+0xd6/0x122
[ 1518.723716][T13947]  dump_stack+0x11/0x12
[ 1518.727880][T13947]  should_fail+0x230/0x240
[ 1518.732307][T13947]  __should_failslab+0x81/0x90
[ 1518.737073][T13947]  ? tcf_action_init_1+0x110/0x470
[ 1518.742223][T13947]  should_failslab+0x5/0x20
[ 1518.746726][T13947]  kmem_cache_alloc_trace+0x4d/0x320
[ 1518.752033][T13947]  ? __nla_parse+0x3c/0x50
[ 1518.756459][T13947]  tcf_action_init_1+0x110/0x470
[ 1518.761410][T13947]  tcf_action_init+0x1de/0x560
[ 1518.766200][T13947]  tc_ctl_action+0x290/0x850
[ 1518.770935][T13947]  ? tca_get_fill+0x290/0x290
17:12:07 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x262201, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x13, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gretap={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x0, 0x15, 0x48351}, @IFLA_GRE_ERSPAN_HWID={0x0, 0x18, 0x2}, @IFLA_GRE_LOCAL={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}, @IFLA_IFNAME={0x0, 0x3, 'macvlan1\x00'}]}, 0x3c}, 0x1, 0x6c}, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000d500000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r11=>0x0}, &(0x7f0000cab000)=0xc)
fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, r11, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x0, 0xee01}, {0x2, 0x6}, {0x2, 0x5, 0xee00}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}, {0x2, 0x2, 0xee01}, {}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2}], {0x4, 0x2}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x6, 0xee00}, {0x8, 0x1, r11}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x4}}, 0x94, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r9}, 0x10)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@newchain={0x68, 0x64, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffe9, 0x4}, {0x1, 0x6}, {0x13, 0xffe3}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0xf9}}, @TCA_CHAIN={0x8, 0xb, 0x1ff}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r9}]}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x9}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2}, 0x4000c)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:07 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x2, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:07 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xb000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:07 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f00000001c0)={0x7}, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
syz_io_uring_setup(0x14c9, &(0x7f0000000500)={0x0, 0xd2bd, 0x20, 0x2, 0x393, 0x0, r4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005f0000/0x2000)=nil, &(0x7f0000000580), &(0x7f00000005c0))
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x6c}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000380)={'syztnl2\x00', r6, 0x7800, 0x8, 0x5, 0x7ff, {{0x52, 0x4, 0x3, 0x33, 0x148, 0x68, 0x0, 0x3, 0x29, 0x0, @multicast2, @local, {[@timestamp_addr={0x44, 0x2c, 0xd, 0x1, 0x6, [{@empty, 0x8}, {@remote, 0x68c7}, {@private=0xa010102, 0x288}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @end, @timestamp_prespec={0x44, 0x44, 0xa0, 0x3, 0x9, [{@remote, 0x2}, {@loopback, 0x61f4d618}, {@rand_addr=0x64010102, 0x20000000}, {@broadcast, 0x4}, {@multicast2, 0x2}, {@loopback, 0xfffffff8}, {@remote, 0x3}, {@loopback, 0xff}]}, @lsrr={0x83, 0x1b, 0x4a, [@loopback, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, @rand_addr=0x64010101]}, @cipso={0x86, 0x4b, 0x1, [{0x6, 0x2}, {0x0, 0xe, "31682a209ffaefadf45c11fd"}, {0x0, 0x2}, {0x0, 0x12, "34d36345b82d63e09f38e6cc9b98362f"}, {0x0, 0x10, "5f722f6df27fdfbcd9838a5257ed"}, {0x5, 0x8, "c495df66b40f"}, {0x0, 0x9, "b6e3dcd8809b48"}]}, @rr={0x7, 0xf, 0xe5, [@private=0xa010100, @local, @broadcast]}, @lsrr={0x83, 0xf, 0xfa, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @timestamp_prespec={0x44, 0x34, 0x1a, 0x3, 0x0, [{@private=0xa010102, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010100, 0x355}, {@rand_addr=0x64010100, 0x3}, {@loopback, 0x4}, {@local, 0x1}]}, @lsrr={0x83, 0xb, 0x2a, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2a}]}]}}}}}) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

[ 1518.775619][T13947]  rtnetlink_rcv_msg+0x74f/0x7e0
[ 1518.780668][T13947]  ? kmem_cache_free+0x65/0x110
[ 1518.785518][T13947]  ? __kfree_skb+0xfe/0x150
[ 1518.790023][T13947]  ? consume_skb+0x48/0x160
[ 1518.794543][T13947]  ? nlmon_xmit+0x5f/0x70
[ 1518.798876][T13947]  ? xmit_one+0x17f/0x2f0
[ 1518.803220][T13947]  ? dev_hard_start_xmit+0xec/0x120
[ 1518.808433][T13947]  ? __this_cpu_preempt_check+0xf/0x10
[ 1518.814015][T13947]  ? __local_bh_enable_ip+0x54/0x80
[ 1518.819226][T13947]  ? local_bh_enable+0x1b/0x20
[ 1518.824028][T13947]  ? ref_tracker_free+0x3a3/0x410
17:12:07 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00005f0000/0x8000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

[ 1518.829146][T13947]  netlink_rcv_skb+0x13e/0x240
[ 1518.833921][T13947]  ? rtnetlink_bind+0x60/0x60
[ 1518.838606][T13947]  rtnetlink_rcv+0x18/0x20
[ 1518.843076][T13947]  netlink_unicast+0x58a/0x660
[ 1518.848089][T13947]  netlink_sendmsg+0x661/0x750
[ 1518.852857][T13947]  ? netlink_getsockopt+0x6c0/0x6c0
[ 1518.858071][T13947]  ____sys_sendmsg+0x38f/0x500
[ 1518.862876][T13947]  __sys_sendmsg+0x195/0x230
[ 1518.867469][T13947]  __x64_sys_sendmsg+0x42/0x50
[ 1518.872260][T13947]  do_syscall_64+0x2b/0x70
[ 1518.876685][T13947]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1518.882657][T13947] RIP: 0033:0x7ff2aa5320e9
[ 1518.887076][T13947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1518.906727][T13947] RSP: 002b:00007ff2a9ca8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1518.915159][T13947] RAX: ffffffffffffffda RBX: 00007ff2aa644f60 RCX: 00007ff2aa5320e9
17:12:07 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000280)='./file0\x00', 0x80, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x6, 0xe4, 0x7, 0x1, 0x0, 0xcef, 0x91670, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x2, 0x4, 0x10, 0x4, 0xaf2, 0x6, 0x1000, 0x0, 0x20000, 0x0, 0x7f}, r0, 0xe, r1, 0x1)
r2 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x1}, &(0x7f000014a000/0x4000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r5 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x10802, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0)
perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x81, 0x2, 0x0, 0x3f, 0x0, 0x6, 0x40806, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000480), 0x1}, 0x10100, 0xfd, 0x0, 0x8, 0x88, 0xfffffffd, 0x200, 0x0, 0x7, 0x0, 0xfffffffffffffff7}, r6, 0xffffffffffffffff, r7, 0x6)
syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:07 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r0 = open(&(0x7f0000000280)='./file0\x00', 0x80, 0x4) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async, rerun: 64)
perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x6, 0xe4, 0x7, 0x1, 0x0, 0xcef, 0x91670, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x2, 0x4, 0x10, 0x4, 0xaf2, 0x6, 0x1000, 0x0, 0x20000, 0x0, 0x7f}, r0, 0xe, r1, 0x1) (async, rerun: 64)
r2 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x1}, &(0x7f000014a000/0x4000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r5 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x10802, 0x0) (async, rerun: 32)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) (async, rerun: 64)
perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x81, 0x2, 0x0, 0x3f, 0x0, 0x6, 0x40806, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000480), 0x1}, 0x10100, 0xfd, 0x0, 0x8, 0x88, 0xfffffffd, 0x200, 0x0, 0x7, 0x0, 0xfffffffffffffff7}, r6, 0xffffffffffffffff, r7, 0x6) (rerun: 64)
syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 32)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:07 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xc000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:07 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x3, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1518.923139][T13947] RDX: 0000000000000000 RSI: 0000000020012240 RDI: 0000000000000003
[ 1518.931118][T13947] RBP: 00007ff2a9ca81d0 R08: 0000000000000000 R09: 0000000000000000
[ 1518.939096][T13947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1518.947104][T13947] R13: 00007ffd742bca4f R14: 00007ff2a9ca8300 R15: 0000000000022000
[ 1518.955168][T13947]  </TASK>
17:12:07 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x262201, 0x0) (async)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x13, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gretap={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x0, 0x15, 0x48351}, @IFLA_GRE_ERSPAN_HWID={0x0, 0x18, 0x2}, @IFLA_GRE_LOCAL={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}, @IFLA_IFNAME={0x0, 0x3, 'macvlan1\x00'}]}, 0x3c}, 0x1, 0x6c}, 0x0) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000d500000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r11=>0x0}, &(0x7f0000cab000)=0xc)
fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, r11, 0x0) (async)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x0, 0xee01}, {0x2, 0x6}, {0x2, 0x5, 0xee00}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}, {0x2, 0x2, 0xee01}, {}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2}], {0x4, 0x2}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x6, 0xee00}, {0x8, 0x1, r11}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x4}}, 0x94, 0x1) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r9}, 0x10) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@newchain={0x68, 0x64, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffe9, 0x4}, {0x1, 0x6}, {0x13, 0xffe3}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0xf9}}, @TCA_CHAIN={0x8, 0xb, 0x1ff}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r9}]}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x9}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2}, 0x4000c) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:07 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (fail_nth: 8)

17:12:07 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00005f0000/0x8000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00005f0000/0x8000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:07 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = open(&(0x7f0000000280)='./file0\x00', 0x80, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x6, 0xe4, 0x7, 0x1, 0x0, 0xcef, 0x91670, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x2, 0x4, 0x10, 0x4, 0xaf2, 0x6, 0x1000, 0x0, 0x20000, 0x0, 0x7f}, r0, 0xe, r1, 0x1)
r2 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x1}, &(0x7f000014a000/0x4000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000180)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r5 = socket$inet(0x2, 0xa, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x10802, 0x0) (async, rerun: 32)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (rerun: 32)
write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) (async, rerun: 64)
perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x81, 0x2, 0x0, 0x3f, 0x0, 0x6, 0x40806, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000480), 0x1}, 0x10100, 0xfd, 0x0, 0x8, 0x88, 0xfffffffd, 0x200, 0x0, 0x7, 0x0, 0xfffffffffffffff7}, r6, 0xffffffffffffffff, r7, 0x6) (async, rerun: 64)
syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r2, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:07 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:07 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x4, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:07 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x262201, 0x0) (async)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r7=>0x0}) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x13, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gretap={{}, {0x0, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x0, 0x15, 0x48351}, @IFLA_GRE_ERSPAN_HWID={0x0, 0x18, 0x2}, @IFLA_GRE_LOCAL={0x0, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}}, @IFLA_IFNAME={0x0, 0x3, 'macvlan1\x00'}]}, 0x3c}, 0x1, 0x6c}, 0x0) (async)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000d500000000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r10 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r11=>0x0}, &(0x7f0000cab000)=0xc)
fchownat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x0, r11, 0x0) (async)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000004c0)='system.posix_acl_default\x00', &(0x7f0000000840)={{}, {0x1, 0x2}, [{0x2, 0x4}, {0x2, 0x0, 0xee01}, {0x2, 0x6}, {0x2, 0x5, 0xee00}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}, {0x2, 0x2, 0xee01}, {}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x2}], {0x4, 0x2}, [{0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x6, 0xee00}, {0x8, 0x1, r11}, {0x8, 0x2, 0xee00}], {0x10, 0x2}, {0x20, 0x4}}, 0x94, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='sys_exit\x00', r9}, 0x10) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@newchain={0x68, 0x64, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffe9, 0x4}, {0x1, 0x6}, {0x13, 0xffe3}}, [@TCA_RATE={0x6, 0x5, {0xfa, 0xf9}}, @TCA_CHAIN={0x8, 0xb, 0x1ff}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r9}]}}, @filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x9}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x2}, 0x4000c)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:07 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f00005f0000/0x8000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:07 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xe000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:07 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x5, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:07 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='.\x00')
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770300000000000000000000000000000000000000000000000000000000c1030000030000003013000068110000681100006811000068110000681100006012000060120000601200006012000060120000030000000000000000000000000002000000000000000060000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000011681100000000000000000000000000000000000000000000000030106367726f75700000000000000000000000000000000000000000000000016000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dea5fbb1c268110f6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056a7b525448176b400000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000053c00654000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000006757537f949a6f3e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002700000000000000000000000000000000319f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e63c6f19b256ecde0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000093000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c746571fffffffffff400000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000200010000000000000000000000007070747000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000c300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004e465155455545000000005500000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

[ 1519.057087][T14011] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1519.095164][T14011] FAULT_INJECTION: forcing a failure.
17:12:07 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x2478, &(0x7f0000000100)={0x0, 0x89bb, 0x4, 0x3, 0x3bb}, &(0x7f0000fff000/0x1000)=nil, &(0x7f000014a000/0x4000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f00000001c0))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fed000/0x13000)=nil, 0x13000, 0xa, 0x1, {0x0, r4}}, 0x7fffffff)

17:12:07 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x6, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1519.095164][T14011] name failslab, interval 1, probability 0, space 0, times 0
[ 1519.107865][T14011] CPU: 1 PID: 14011 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller-00235-g22da5264abf4-dirty #0
[ 1519.118893][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1519.129055][T14011] Call Trace:
[ 1519.132334][T14011]  <TASK>
[ 1519.135267][T14011]  dump_stack_lvl+0xd6/0x122
[ 1519.139940][T14011]  dump_stack+0x11/0x12
[ 1519.144230][T14011]  should_fail+0x230/0x240
[ 1519.148652][T14011]  __should_failslab+0x81/0x90
[ 1519.153508][T14011]  ? radix_tree_node_alloc+0x8b/0x200
[ 1519.158910][T14011]  should_failslab+0x5/0x20
[ 1519.163428][T14011]  kmem_cache_alloc+0x46/0x300
[ 1519.168246][T14011]  ? vprintk_default+0x22/0x30
[ 1519.173024][T14011]  radix_tree_node_alloc+0x8b/0x200
[ 1519.178245][T14011]  ? __this_cpu_preempt_check+0xf/0x10
[ 1519.183725][T14011]  ? __perf_event_task_sched_in+0x353/0x390
[ 1519.189698][T14011]  idr_get_free+0x22a/0x5c0
[ 1519.194204][T14011]  idr_alloc_u32+0xbc/0x160
[ 1519.198702][T14011]  tcf_idr_check_alloc+0x134/0x220
[ 1519.203820][T14011]  tunnel_key_init+0x194/0xcc0
[ 1519.208570][T14011]  ? should_fail+0xd5/0x240
[ 1519.213076][T14011]  tcf_action_init_1+0x346/0x470
[ 1519.218102][T14011]  tcf_action_init+0x1de/0x560
[ 1519.222897][T14011]  tc_ctl_action+0x290/0x850
[ 1519.227533][T14011]  ? tca_get_fill+0x290/0x290
[ 1519.232195][T14011]  rtnetlink_rcv_msg+0x74f/0x7e0
[ 1519.237222][T14011]  ? kmem_cache_free+0x65/0x110
[ 1519.242123][T14011]  ? __kfree_skb+0xfe/0x150
[ 1519.246606][T14011]  ? consume_skb+0x48/0x160
[ 1519.251155][T14011]  ? nlmon_xmit+0x5f/0x70
[ 1519.255467][T14011]  ? xmit_one+0x17f/0x2f0
[ 1519.259986][T14011]  ? dev_hard_start_xmit+0xec/0x120
[ 1519.265253][T14011]  ? __this_cpu_preempt_check+0xf/0x10
[ 1519.270697][T14011]  ? __local_bh_enable_ip+0x54/0x80
[ 1519.275973][T14011]  ? local_bh_enable+0x1b/0x20
[ 1519.280717][T14011]  ? ref_tracker_free+0x3a3/0x410
[ 1519.285789][T14011]  netlink_rcv_skb+0x13e/0x240
[ 1519.290684][T14011]  ? rtnetlink_bind+0x60/0x60
[ 1519.295349][T14011]  rtnetlink_rcv+0x18/0x20
[ 1519.299798][T14011]  netlink_unicast+0x58a/0x660
[ 1519.304594][T14011]  netlink_sendmsg+0x661/0x750
[ 1519.309340][T14011]  ? netlink_getsockopt+0x6c0/0x6c0
[ 1519.314532][T14011]  ____sys_sendmsg+0x38f/0x500
[ 1519.319348][T14011]  __sys_sendmsg+0x195/0x230
[ 1519.323927][T14011]  __x64_sys_sendmsg+0x42/0x50
[ 1519.328690][T14011]  do_syscall_64+0x2b/0x70
[ 1519.333104][T14011]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1519.338984][T14011] RIP: 0033:0x7ff2aa5320e9
[ 1519.343374][T14011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1519.363099][T14011] RSP: 002b:00007ff2a9ca8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1519.371528][T14011] RAX: ffffffffffffffda RBX: 00007ff2aa644f60 RCX: 00007ff2aa5320e9
[ 1519.379564][T14011] RDX: 0000000000000000 RSI: 0000000020012240 RDI: 0000000000000003
[ 1519.387632][T14011] RBP: 00007ff2a9ca81d0 R08: 0000000000000000 R09: 0000000000000000
[ 1519.395603][T14011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
17:12:08 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x10000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:08 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='.\x00')
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770300000000000000000000000000000000000000000000000000000000c1030000030000003013000068110000681100006811000068110000681100006012000060120000601200006012000060120000030000000000000000000000000002000000000000000060000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000011681100000000000000000000000000000000000000000000000030106367726f75700000000000000000000000000000000000000000000000016000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dea5fbb1c268110f6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056a7b525448176b400000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000053c00654000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000006757537f949a6f3e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002700000000000000000000000000000000319f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e63c6f19b256ecde0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000093000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c746571fffffffffff400000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000200010000000000000000000000007070747000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000c300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004e465155455545000000005500000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1) (async, rerun: 64)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (rerun: 64)

17:12:08 executing program 2:
r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
r4 = getpgrp(0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x8f, 0x7, 0x7, 0x0, 0x5, 0x20048, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x78, 0x2, @perf_config_ext={0x40000000000, 0x401}, 0x44260, 0x73, 0x200, 0x3, 0x44ee, 0x1ff, 0x7fff, 0x0, 0x7ac}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000880), &(0x7f00000008c0)={'L-', 0x40}, 0x16, 0x2)
r5 = mmap$IORING_OFF_SQES(&(0x7f00005f0000/0x1000)=nil, 0x1000, 0x100000a, 0x8010, r1, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r5, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)=@rc={0x1f, @any, 0x5}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000540)="1fff216df1900bf31df16b47519144406e9c604087c7c47d8792adcac668e31c90902ce4d72b36fe3e96920758233ab56ffc7e4a70fae41d7d5170add1572110a83edc5ce2376bc9afa8ded5de1650f59312e393c59c2fed3517ae25bfb43f8cb6e40a72701bde08e7def4240d7cdf3ef1f57383ac61f7d2875df203780e0e01a62fac07c233ed7e620ff434d79046b0af9d5542773385a2000784", 0x9b}, {&(0x7f0000000600)="3af088765ae0aad0cba06468c10f8052053afe082226b4243317a9eddf89ce27ccdc1e3453033ef7e68fd87dad164f911559e3d2157135f397e7cd88e114e6c4985713dbdbfa3e1df15c8fb6a4bbb3f2e894cdcaf72c179da14e7acd4032e0cd27b6eaa2e35198dca19682b3c7a4e276b8f62548406651f8fd6a623977d164b8935ebd641c64633cdcd395fe8e06e95c7d045d9e5268d3b50ea3", 0x9a}, {&(0x7f0000000280)="0c445ba8fcaacf453f7307f2369fdd834d7f5a7a73b723102048dec1119d1f1d3eff4a958118d1096fcb6933", 0x2c}, {&(0x7f00000006c0)="0407e9e4f2a7d899f29425865cd6b6b88f8b1d4a1b880c1a950dc94e0e65992083a3947ba44cb90edea963ec1c134c7ddf7d62fada2df05bf8b28d9c51590b522e84d9054f88c4c2ebbeb7281ceb9f926108bc25941840404bad21428deb4cddff638fb716759676b798388bd7faf8ec1c6e19f7955b3984ca8e6b63e543b72ca64880886edbef219a0dea009c18d3c7dc8e74520c8dd55bd4dfd4c30d70bffcf215990de4b8555ae3961705be4a29cfaa66d19e0d04e896b522333f736dc33ca252619a126c364a66a4ec63c7ff", 0xce}, {&(0x7f0000000900)}], 0x5}, 0x0, 0x8000, 0x1, {0x0, r6}}, 0x6)
r7 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in}, 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x119c00, 0x0)
io_uring_enter(r8, 0x45f5, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000007c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x1002}}, 0x7)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r9, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000400)=""/168, 0xa8})
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (fail_nth: 9)

17:12:08 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (rerun: 64)
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r5 = pidfd_getfd(r4, r4, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='.\x00')
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="7261770300000000000000000000000000000000000000000000000000000000c1030000030000003013000068110000681100006811000068110000681100006012000060120000601200006012000060120000030000000000000000000000000002000000000000000060000000000000004c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000011681100000000000000000000000000000000000000000000000030106367726f75700000000000000000000000000000000000000000000000016000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dea5fbb1c268110f6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056a7b525448176b400000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000053c00654000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000006757537f949a6f3e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002700000000000000000000000000000000319f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e63c6f19b256ecde0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000093000000000000000000000000000000000000000000000000000000000000000000000000002800727066696c746571fffffffffff400000000000000000000000000000000000000000000000068004354000000000000000000000000000000000000000000000000000200010000000000000000000000007070747000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000c300000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800727066696c74657200000000000000000000000000000000000000000000000000000000000028004e465155455545000000005500000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:08 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 64)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (rerun: 64)
syz_io_uring_setup(0x2478, &(0x7f0000000100)={0x0, 0x89bb, 0x4, 0x3, 0x3bb}, &(0x7f0000fff000/0x1000)=nil, &(0x7f000014a000/0x4000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f00000001c0)) (async)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fed000/0x13000)=nil, 0x13000, 0xa, 0x1, {0x0, r4}}, 0x7fffffff)

[ 1519.403556][T14011] R13: 00007ffd742bca4f R14: 00007ff2a9ca8300 R15: 0000000000022000
[ 1519.411508][T14011]  </TASK>
[ 1519.424692][T14011] syz-executor.3 (14011) used greatest stack depth: 9704 bytes left
[ 1519.442089][T14040] xt_check_match: 13 callbacks suppressed
[ 1519.442109][T14040] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:08 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x7, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1519.461202][T14043] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1519.488190][T14043] FAULT_INJECTION: forcing a failure.
[ 1519.488190][T14043] name failslab, interval 1, probability 0, space 0, times 0
17:12:08 executing program 2:
r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0) (rerun: 32)
r4 = getpgrp(0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x8f, 0x7, 0x7, 0x0, 0x5, 0x20048, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x78, 0x2, @perf_config_ext={0x40000000000, 0x401}, 0x44260, 0x73, 0x200, 0x3, 0x44ee, 0x1ff, 0x7fff, 0x0, 0x7ac}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async, rerun: 32)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000880), &(0x7f00000008c0)={'L-', 0x40}, 0x16, 0x2) (async, rerun: 32)
r5 = mmap$IORING_OFF_SQES(&(0x7f00005f0000/0x1000)=nil, 0x1000, 0x100000a, 0x8010, r1, 0x10000000) (async)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r5, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)=@rc={0x1f, @any, 0x5}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000540)="1fff216df1900bf31df16b47519144406e9c604087c7c47d8792adcac668e31c90902ce4d72b36fe3e96920758233ab56ffc7e4a70fae41d7d5170add1572110a83edc5ce2376bc9afa8ded5de1650f59312e393c59c2fed3517ae25bfb43f8cb6e40a72701bde08e7def4240d7cdf3ef1f57383ac61f7d2875df203780e0e01a62fac07c233ed7e620ff434d79046b0af9d5542773385a2000784", 0x9b}, {&(0x7f0000000600)="3af088765ae0aad0cba06468c10f8052053afe082226b4243317a9eddf89ce27ccdc1e3453033ef7e68fd87dad164f911559e3d2157135f397e7cd88e114e6c4985713dbdbfa3e1df15c8fb6a4bbb3f2e894cdcaf72c179da14e7acd4032e0cd27b6eaa2e35198dca19682b3c7a4e276b8f62548406651f8fd6a623977d164b8935ebd641c64633cdcd395fe8e06e95c7d045d9e5268d3b50ea3", 0x9a}, {&(0x7f0000000280)="0c445ba8fcaacf453f7307f2369fdd834d7f5a7a73b723102048dec1119d1f1d3eff4a958118d1096fcb6933", 0x2c}, {&(0x7f00000006c0)="0407e9e4f2a7d899f29425865cd6b6b88f8b1d4a1b880c1a950dc94e0e65992083a3947ba44cb90edea963ec1c134c7ddf7d62fada2df05bf8b28d9c51590b522e84d9054f88c4c2ebbeb7281ceb9f926108bc25941840404bad21428deb4cddff638fb716759676b798388bd7faf8ec1c6e19f7955b3984ca8e6b63e543b72ca64880886edbef219a0dea009c18d3c7dc8e74520c8dd55bd4dfd4c30d70bffcf215990de4b8555ae3961705be4a29cfaa66d19e0d04e896b522333f736dc33ca252619a126c364a66a4ec63c7ff", 0xce}, {&(0x7f0000000900)}], 0x5}, 0x0, 0x8000, 0x1, {0x0, r6}}, 0x6) (async)
r7 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x119c00, 0x0)
io_uring_enter(r8, 0x45f5, 0x0, 0x0, 0x0, 0x0) (async)
syz_io_uring_submit(r2, 0x0, &(0x7f00000007c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x1002}}, 0x7) (async)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r9, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000400)=""/168, 0xa8})
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32)
dup(0xffffffffffffffff) (async, rerun: 32)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:08 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x2478, &(0x7f0000000100)={0x0, 0x89bb, 0x4, 0x3, 0x3bb}, &(0x7f0000fff000/0x1000)=nil, &(0x7f000014a000/0x4000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f00000001c0))
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fed000/0x13000)=nil, 0x13000, 0xa, 0x1, {0x0, r4}}, 0x7fffffff)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_setup(0x2478, &(0x7f0000000100)={0x0, 0x89bb, 0x4, 0x3, 0x3bb}, &(0x7f0000fff000/0x1000)=nil, &(0x7f000014a000/0x4000)=nil, &(0x7f0000000000), &(0x7f00000001c0)) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000fed000/0x13000)=nil, 0x13000, 0xa, 0x1, {0x0, r4}}, 0x7fffffff) (async)

17:12:08 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x8, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:08 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x11000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:08 executing program 1:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x100)
r2 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x5, 0x4, &(0x7f0000000800)=[{&(0x7f0000000540)="394dddeb2e66908befa8bcc90136d87fee78fec6fad41fb1c79a06f4c74106e1ead501449181ad7b917e8b84e2036e893f3a2839b2794410cbe109a48247f2eb7bf674cff901dc2eb2457def97998c31fa9cbae0214e418eb41d1c0aa3942fc68ba85dfa1770094f2a34472fd882935e26465bf1a96da87d700889f097aa63b94ebcc917883880e725bdbcdeb2eca290ee35bce180ee20be94877a92ddcb1ad6f665daad18ab54d03a903aba3a57953bbbe31df307bb2244625e1b6239e299be329b3e9388fedd2b4ddbf8499ee2741e2843162fdb197740b3fd1a4e", 0xdc, 0x3}, {&(0x7f0000000640)="14ba1c5d92ee4b0980bf7e0d1b6e9c7401d7c6c00a0a1ecab6563f8ac681c1cbc2e36782d30b4213405a90b4d815203bb0c4d7d0231213d5e45f9e017167290309614914bb8a47e545bbcc9b60be2e000c7fc7f1a2fdf7b71e511ef61c16513aa8c97fb4d12be5d332c11aafdcdf4eacfdafef", 0x73}, {&(0x7f00000006c0)="946b9f1b71bfc4874c5a6fa6708bc4", 0xf, 0x5}, {&(0x7f0000000700)="7af6e503396c778540a74c85bae1c7825b95c052cc260a6f8f74c857c31a0d7fc2da00433bd32a968bb4d8f57f3c73ba27653924f364407c4f29c729f3cf06e36a995a5d188546e397f81fb5223774cefd946768e999e98804f3f53bd4218e9ddea3e104e543f7f8211b533c801ec75dad7f20c13136fd5e195b8aab87eeaa0b051f29d4b210924b5b24fc0462b96b7fa0189b70958129c2ccc0d4bf0eb9739388de9356c93f043714c2114af18c61e0d19ca68513ec8e0f951793ca669867ee189bffb8b2075c", 0xc7, 0x8}], 0x100000, &(0x7f0000000880)={[{@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@init_itable}], [{@smackfshat}]})
write$binfmt_script(r2, &(0x7f0000000900)={'#! ', './file0', [{0x20, '--*}+/#}$:'}, {0x20, '\']'}], 0xa, "e6e70804cb2c2e89296b07bd84cf72cb1036d55198184b9eb506897637aafa451701dddc08a46f8f0c6e6e57e1455a7234f3f5996b336abe2395918bc79471ce21d47117df27f737b5959a14588611d6921759918ee38ce637dadd5aa7ba6a3d662b1db6defa052822aeb6936961a0b051f492e693ed6877a2c5a071dfcc417f06e1cddb95"}, 0x9e)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x6c}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xc0, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xba}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x2000000)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x200, 0x4)
r6 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x37c3, 0x2, 0x800, 0x1}, &(0x7f000014b000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r7=>0x0, &(0x7f0000000180)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x118, &(0x7f00000000c0)=0x42, 0x0, 0x4)
r9 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r6, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
setsockopt$inet_int(r10, 0x0, 0xd, &(0x7f0000000100)=0x2, 0x4)
bind$inet(r10, &(0x7f00000009c0)={0x2, 0x4e23, @private=0xa010102}, 0x10)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

[ 1519.500902][T14043] CPU: 1 PID: 14043 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller-00235-g22da5264abf4-dirty #0
[ 1519.511930][T14043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1519.522032][T14043] Call Trace:
[ 1519.525307][T14043]  <TASK>
[ 1519.528273][T14043]  dump_stack_lvl+0xd6/0x122
[ 1519.533025][T14043]  dump_stack+0x11/0x12
[ 1519.537193][T14043]  should_fail+0x230/0x240
[ 1519.541693][T14043]  __should_failslab+0x81/0x90
[ 1519.546623][T14043]  should_failslab+0x5/0x20
[ 1519.551161][T14043]  kmem_cache_alloc_node+0x58/0x2c0
[ 1519.556437][T14043]  ? __alloc_skb+0xfc/0x450
17:12:08 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x3}, 0x8)
r6 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in}, 0x0)
r7 = io_uring_setup(0x7c6d, &(0x7f0000000000)={0x0, 0xb926, 0x8, 0x2, 0x30a})
mmap$IORING_OFF_SQES(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000004, 0x110, r7, 0x10000000)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:08 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0) (async)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x3}, 0x8) (async)
r6 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
r7 = io_uring_setup(0x7c6d, &(0x7f0000000000)={0x0, 0xb926, 0x8, 0x2, 0x30a})
mmap$IORING_OFF_SQES(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000004, 0x110, r7, 0x10000000) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

[ 1519.561030][T14043]  __alloc_skb+0xfc/0x450
[ 1519.565417][T14043]  ? __this_cpu_preempt_check+0xf/0x10
[ 1519.570889][T14043]  netlink_ack+0x273/0x650
[ 1519.575432][T14043]  netlink_rcv_skb+0x1b7/0x240
[ 1519.580197][T14043]  ? rtnetlink_bind+0x60/0x60
[ 1519.584886][T14043]  rtnetlink_rcv+0x18/0x20
[ 1519.589313][T14043]  netlink_unicast+0x58a/0x660
[ 1519.594083][T14043]  netlink_sendmsg+0x661/0x750
[ 1519.599133][T14043]  ? netlink_getsockopt+0x6c0/0x6c0
[ 1519.604340][T14043]  ____sys_sendmsg+0x38f/0x500
17:12:08 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f00000000c0)=@IORING_OP_NOP={0x0, 0x3}, 0x8) (async)
r6 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r6, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in}, 0x0) (async, rerun: 64)
r7 = io_uring_setup(0x7c6d, &(0x7f0000000000)={0x0, 0xb926, 0x8, 0x2, 0x30a}) (rerun: 64)
mmap$IORING_OFF_SQES(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000004, 0x110, r7, 0x10000000) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

[ 1519.609181][T14043]  __sys_sendmsg+0x195/0x230
[ 1519.613790][T14043]  __x64_sys_sendmsg+0x42/0x50
[ 1519.618620][T14043]  do_syscall_64+0x2b/0x70
[ 1519.623052][T14043]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1519.628951][T14043] RIP: 0033:0x7ff2aa5320e9
[ 1519.633362][T14043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1519.652971][T14043] RSP: 002b:00007ff2a9ca8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1519.661387][T14043] RAX: ffffffffffffffda RBX: 00007ff2aa644f60 RCX: 00007ff2aa5320e9
[ 1519.669359][T14043] RDX: 0000000000000000 RSI: 0000000020012240 RDI: 0000000000000003
[ 1519.677339][T14043] RBP: 00007ff2a9ca81d0 R08: 0000000000000000 R09: 0000000000000000
[ 1519.682190][T14090] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1519.685447][T14043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1519.685465][T14043] R13: 00007ffd742bca4f R14: 00007ff2a9ca8300 R15: 0000000000022000
17:12:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (fail_nth: 10)

17:12:08 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000000)={0x6, 0x400}, 0xc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:08 executing program 1:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x100)
r2 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x5, 0x4, &(0x7f0000000800)=[{&(0x7f0000000540)="394dddeb2e66908befa8bcc90136d87fee78fec6fad41fb1c79a06f4c74106e1ead501449181ad7b917e8b84e2036e893f3a2839b2794410cbe109a48247f2eb7bf674cff901dc2eb2457def97998c31fa9cbae0214e418eb41d1c0aa3942fc68ba85dfa1770094f2a34472fd882935e26465bf1a96da87d700889f097aa63b94ebcc917883880e725bdbcdeb2eca290ee35bce180ee20be94877a92ddcb1ad6f665daad18ab54d03a903aba3a57953bbbe31df307bb2244625e1b6239e299be329b3e9388fedd2b4ddbf8499ee2741e2843162fdb197740b3fd1a4e", 0xdc, 0x3}, {&(0x7f0000000640)="14ba1c5d92ee4b0980bf7e0d1b6e9c7401d7c6c00a0a1ecab6563f8ac681c1cbc2e36782d30b4213405a90b4d815203bb0c4d7d0231213d5e45f9e017167290309614914bb8a47e545bbcc9b60be2e000c7fc7f1a2fdf7b71e511ef61c16513aa8c97fb4d12be5d332c11aafdcdf4eacfdafef", 0x73}, {&(0x7f00000006c0)="946b9f1b71bfc4874c5a6fa6708bc4", 0xf, 0x5}, {&(0x7f0000000700)="7af6e503396c778540a74c85bae1c7825b95c052cc260a6f8f74c857c31a0d7fc2da00433bd32a968bb4d8f57f3c73ba27653924f364407c4f29c729f3cf06e36a995a5d188546e397f81fb5223774cefd946768e999e98804f3f53bd4218e9ddea3e104e543f7f8211b533c801ec75dad7f20c13136fd5e195b8aab87eeaa0b051f29d4b210924b5b24fc0462b96b7fa0189b70958129c2ccc0d4bf0eb9739388de9356c93f043714c2114af18c61e0d19ca68513ec8e0f951793ca669867ee189bffb8b2075c", 0xc7, 0x8}], 0x100000, &(0x7f0000000880)={[{@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@init_itable}], [{@smackfshat}]})
write$binfmt_script(r2, &(0x7f0000000900)={'#! ', './file0', [{0x20, '--*}+/#}$:'}, {0x20, '\']'}], 0xa, "e6e70804cb2c2e89296b07bd84cf72cb1036d55198184b9eb506897637aafa451701dddc08a46f8f0c6e6e57e1455a7234f3f5996b336abe2395918bc79471ce21d47117df27f737b5959a14588611d6921759918ee38ce637dadd5aa7ba6a3d662b1db6defa052822aeb6936961a0b051f492e693ed6877a2c5a071dfcc417f06e1cddb95"}, 0x9e)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x6c}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xc0, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xba}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x2000000)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x200, 0x4)
r6 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x37c3, 0x2, 0x800, 0x1}, &(0x7f000014b000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r7=>0x0, &(0x7f0000000180)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x118, &(0x7f00000000c0)=0x42, 0x0, 0x4)
r9 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r6, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
setsockopt$inet_int(r10, 0x0, 0xd, &(0x7f0000000100)=0x2, 0x4)
bind$inet(r10, &(0x7f00000009c0)={0x2, 0x4e23, @private=0xa010102}, 0x10)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
creat(&(0x7f00000001c0)='./file0\x00', 0x100) (async)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x5, 0x4, &(0x7f0000000800)=[{&(0x7f0000000540)="394dddeb2e66908befa8bcc90136d87fee78fec6fad41fb1c79a06f4c74106e1ead501449181ad7b917e8b84e2036e893f3a2839b2794410cbe109a48247f2eb7bf674cff901dc2eb2457def97998c31fa9cbae0214e418eb41d1c0aa3942fc68ba85dfa1770094f2a34472fd882935e26465bf1a96da87d700889f097aa63b94ebcc917883880e725bdbcdeb2eca290ee35bce180ee20be94877a92ddcb1ad6f665daad18ab54d03a903aba3a57953bbbe31df307bb2244625e1b6239e299be329b3e9388fedd2b4ddbf8499ee2741e2843162fdb197740b3fd1a4e", 0xdc, 0x3}, {&(0x7f0000000640)="14ba1c5d92ee4b0980bf7e0d1b6e9c7401d7c6c00a0a1ecab6563f8ac681c1cbc2e36782d30b4213405a90b4d815203bb0c4d7d0231213d5e45f9e017167290309614914bb8a47e545bbcc9b60be2e000c7fc7f1a2fdf7b71e511ef61c16513aa8c97fb4d12be5d332c11aafdcdf4eacfdafef", 0x73}, {&(0x7f00000006c0)="946b9f1b71bfc4874c5a6fa6708bc4", 0xf, 0x5}, {&(0x7f0000000700)="7af6e503396c778540a74c85bae1c7825b95c052cc260a6f8f74c857c31a0d7fc2da00433bd32a968bb4d8f57f3c73ba27653924f364407c4f29c729f3cf06e36a995a5d188546e397f81fb5223774cefd946768e999e98804f3f53bd4218e9ddea3e104e543f7f8211b533c801ec75dad7f20c13136fd5e195b8aab87eeaa0b051f29d4b210924b5b24fc0462b96b7fa0189b70958129c2ccc0d4bf0eb9739388de9356c93f043714c2114af18c61e0d19ca68513ec8e0f951793ca669867ee189bffb8b2075c", 0xc7, 0x8}], 0x100000, &(0x7f0000000880)={[{@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@init_itable}], [{@smackfshat}]}) (async)
write$binfmt_script(r2, &(0x7f0000000900)={'#! ', './file0', [{0x20, '--*}+/#}$:'}, {0x20, '\']'}], 0xa, "e6e70804cb2c2e89296b07bd84cf72cb1036d55198184b9eb506897637aafa451701dddc08a46f8f0c6e6e57e1455a7234f3f5996b336abe2395918bc79471ce21d47117df27f737b5959a14588611d6921759918ee38ce637dadd5aa7ba6a3d662b1db6defa052822aeb6936961a0b051f492e693ed6877a2c5a071dfcc417f06e1cddb95"}, 0x9e) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x6c}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xc0, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xba}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) (async)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x200, 0x4) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x37c3, 0x2, 0x800, 0x1}, &(0x7f000014b000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x118, &(0x7f00000000c0)=0x42, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r6, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) (async)
setsockopt$inet_int(r10, 0x0, 0xd, &(0x7f0000000100)=0x2, 0x4) (async)
bind$inet(r10, &(0x7f00000009c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) (async)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:08 executing program 2:
r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
r4 = getpgrp(0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x8f, 0x7, 0x7, 0x0, 0x5, 0x20048, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x78, 0x2, @perf_config_ext={0x40000000000, 0x401}, 0x44260, 0x73, 0x200, 0x3, 0x44ee, 0x1ff, 0x7fff, 0x0, 0x7ac}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000880), &(0x7f00000008c0)={'L-', 0x40}, 0x16, 0x2)
r5 = mmap$IORING_OFF_SQES(&(0x7f00005f0000/0x1000)=nil, 0x1000, 0x100000a, 0x8010, r1, 0x10000000)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r5, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)=@rc={0x1f, @any, 0x5}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000540)="1fff216df1900bf31df16b47519144406e9c604087c7c47d8792adcac668e31c90902ce4d72b36fe3e96920758233ab56ffc7e4a70fae41d7d5170add1572110a83edc5ce2376bc9afa8ded5de1650f59312e393c59c2fed3517ae25bfb43f8cb6e40a72701bde08e7def4240d7cdf3ef1f57383ac61f7d2875df203780e0e01a62fac07c233ed7e620ff434d79046b0af9d5542773385a2000784", 0x9b}, {&(0x7f0000000600)="3af088765ae0aad0cba06468c10f8052053afe082226b4243317a9eddf89ce27ccdc1e3453033ef7e68fd87dad164f911559e3d2157135f397e7cd88e114e6c4985713dbdbfa3e1df15c8fb6a4bbb3f2e894cdcaf72c179da14e7acd4032e0cd27b6eaa2e35198dca19682b3c7a4e276b8f62548406651f8fd6a623977d164b8935ebd641c64633cdcd395fe8e06e95c7d045d9e5268d3b50ea3", 0x9a}, {&(0x7f0000000280)="0c445ba8fcaacf453f7307f2369fdd834d7f5a7a73b723102048dec1119d1f1d3eff4a958118d1096fcb6933", 0x2c}, {&(0x7f00000006c0)="0407e9e4f2a7d899f29425865cd6b6b88f8b1d4a1b880c1a950dc94e0e65992083a3947ba44cb90edea963ec1c134c7ddf7d62fada2df05bf8b28d9c51590b522e84d9054f88c4c2ebbeb7281ceb9f926108bc25941840404bad21428deb4cddff638fb716759676b798388bd7faf8ec1c6e19f7955b3984ca8e6b63e543b72ca64880886edbef219a0dea009c18d3c7dc8e74520c8dd55bd4dfd4c30d70bffcf215990de4b8555ae3961705be4a29cfaa66d19e0d04e896b522333f736dc33ca252619a126c364a66a4ec63c7ff", 0xce}, {&(0x7f0000000900)}], 0x5}, 0x0, 0x8000, 0x1, {0x0, r6}}, 0x6)
r7 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in}, 0x0)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x119c00, 0x0)
io_uring_enter(r8, 0x45f5, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000007c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x1002}}, 0x7)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff})
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r9, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000400)=""/168, 0xa8})
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
getpgrp(0x0) (async)
perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x8, 0x8f, 0x7, 0x7, 0x0, 0x5, 0x20048, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x78, 0x2, @perf_config_ext={0x40000000000, 0x401}, 0x44260, 0x73, 0x200, 0x3, 0x44ee, 0x1ff, 0x7fff, 0x0, 0x7ac}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000880), &(0x7f00000008c0)={'L-', 0x40}, 0x16, 0x2) (async)
mmap$IORING_OFF_SQES(&(0x7f00005f0000/0x1000)=nil, 0x1000, 0x100000a, 0x8010, r1, 0x10000000) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (async)
syz_io_uring_submit(r2, r5, &(0x7f0000000840)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={&(0x7f00000004c0)=@rc={0x1f, @any, 0x5}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000540)="1fff216df1900bf31df16b47519144406e9c604087c7c47d8792adcac668e31c90902ce4d72b36fe3e96920758233ab56ffc7e4a70fae41d7d5170add1572110a83edc5ce2376bc9afa8ded5de1650f59312e393c59c2fed3517ae25bfb43f8cb6e40a72701bde08e7def4240d7cdf3ef1f57383ac61f7d2875df203780e0e01a62fac07c233ed7e620ff434d79046b0af9d5542773385a2000784", 0x9b}, {&(0x7f0000000600)="3af088765ae0aad0cba06468c10f8052053afe082226b4243317a9eddf89ce27ccdc1e3453033ef7e68fd87dad164f911559e3d2157135f397e7cd88e114e6c4985713dbdbfa3e1df15c8fb6a4bbb3f2e894cdcaf72c179da14e7acd4032e0cd27b6eaa2e35198dca19682b3c7a4e276b8f62548406651f8fd6a623977d164b8935ebd641c64633cdcd395fe8e06e95c7d045d9e5268d3b50ea3", 0x9a}, {&(0x7f0000000280)="0c445ba8fcaacf453f7307f2369fdd834d7f5a7a73b723102048dec1119d1f1d3eff4a958118d1096fcb6933", 0x2c}, {&(0x7f00000006c0)="0407e9e4f2a7d899f29425865cd6b6b88f8b1d4a1b880c1a950dc94e0e65992083a3947ba44cb90edea963ec1c134c7ddf7d62fada2df05bf8b28d9c51590b522e84d9054f88c4c2ebbeb7281ceb9f926108bc25941840404bad21428deb4cddff638fb716759676b798388bd7faf8ec1c6e19f7955b3984ca8e6b63e543b72ca64880886edbef219a0dea009c18d3c7dc8e74520c8dd55bd4dfd4c30d70bffcf215990de4b8555ae3961705be4a29cfaa66d19e0d04e896b522333f736dc33ca252619a126c364a66a4ec63c7ff", 0xce}, {&(0x7f0000000900)}], 0x5}, 0x0, 0x8000, 0x1, {0x0, r6}}, 0x6) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x119c00, 0x0) (async)
io_uring_enter(r8, 0x45f5, 0x0, 0x0, 0x0, 0x0) (async)
syz_io_uring_submit(r2, 0x0, &(0x7f00000007c0)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd, 0x0, 0x0, 0x0, {0x1002}}, 0x7) (async)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000140)) (async)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r9, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000400)=""/168, 0xa8}) (async)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)

17:12:08 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0xa, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:08 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x12000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:08 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0xb, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1519.712033][T14043]  </TASK>
17:12:08 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000000)={0x6, 0x400}, 0xc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000000)={0x6, 0x400}, 0xc) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)

17:12:08 executing program 2:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0xa8714, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0xd5c4, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r4 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000380)={{0x4, @loopback, 0x4e21, 0x0, 'rr\x00', 0x2d, 0x7, 0x5e}, {@multicast1, 0x4e23, 0x1, 0x4, 0x9, 0x7cb3ac9b}}, 0x44)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:08 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0xc, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:08 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000000)={0x6, 0x400}, 0xc)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000000)={0x6, 0x400}, 0xc) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)

[ 1519.752710][T14120] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1519.765984][T14121] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1519.788545][T14121] FAULT_INJECTION: forcing a failure.
[ 1519.788545][T14121] name failslab, interval 1, probability 0, space 0, times 0
17:12:08 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8, 0x10000, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180))
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_setup(0x3e4c, &(0x7f0000000000)={0x0, 0x5f7f, 0x8, 0x1, 0x234, 0x0, r0}, &(0x7f00005f1000/0x4000)=nil, &(0x7f00005f0000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r2, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f00000000c0))
mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2000001, 0x50, r6, 0x8fbdf000)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
write$UHID_INPUT(r5, &(0x7f0000000380)={0x8, {"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", 0x1000}}, 0x1006)
syz_open_pts(r0, 0x0)

[ 1519.801205][T14121] CPU: 1 PID: 14121 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller-00235-g22da5264abf4-dirty #0
[ 1519.812287][T14121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1519.822344][T14121] Call Trace:
[ 1519.825618][T14121]  <TASK>
[ 1519.828549][T14121]  dump_stack_lvl+0xd6/0x122
[ 1519.833151][T14121]  dump_stack+0x11/0x12
[ 1519.837320][T14121]  should_fail+0x230/0x240
[ 1519.841797][T14121]  __should_failslab+0x81/0x90
[ 1519.846611][T14121]  should_failslab+0x5/0x20
[ 1519.851120][T14121]  kmem_cache_alloc_node_trace+0x58/0x300
[ 1519.856868][T14121]  ? kmem_cache_alloc_node+0x1e4/0x2c0
[ 1519.862364][T14121]  ? __alloc_skb+0x1a7/0x450
[ 1519.865967][T14166] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20001
[ 1519.867001][T14121]  ? netlink_ack+0x273/0x650
[ 1519.867076][T14121]  __alloc_skb+0x1a7/0x450
[ 1519.867111][T14121]  ? __this_cpu_preempt_check+0xf/0x10
[ 1519.888250][T14121]  netlink_ack+0x273/0x650
[ 1519.892766][T14121]  netlink_rcv_skb+0x1b7/0x240
[ 1519.897597][T14121]  ? rtnetlink_bind+0x60/0x60
[ 1519.902302][T14121]  rtnetlink_rcv+0x18/0x20
[ 1519.906721][T14121]  netlink_unicast+0x58a/0x660
[ 1519.911497][T14121]  netlink_sendmsg+0x661/0x750
[ 1519.916348][T14121]  ? netlink_getsockopt+0x6c0/0x6c0
[ 1519.921549][T14121]  ____sys_sendmsg+0x38f/0x500
[ 1519.926380][T14121]  __sys_sendmsg+0x195/0x230
[ 1519.930993][T14121]  __x64_sys_sendmsg+0x42/0x50
[ 1519.935771][T14121]  do_syscall_64+0x2b/0x70
[ 1519.940202][T14121]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1519.946132][T14121] RIP: 0033:0x7ff2aa5320e9
[ 1519.950600][T14121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1519.970258][T14121] RSP: 002b:00007ff2a9ca8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1519.978689][T14121] RAX: ffffffffffffffda RBX: 00007ff2aa644f60 RCX: 00007ff2aa5320e9
[ 1519.986678][T14121] RDX: 0000000000000000 RSI: 0000000020012240 RDI: 0000000000000003
[ 1519.994697][T14121] RBP: 00007ff2a9ca81d0 R08: 0000000000000000 R09: 0000000000000000
17:12:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (fail_nth: 11)

17:12:08 executing program 1:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x100)
r2 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x5, 0x4, &(0x7f0000000800)=[{&(0x7f0000000540)="394dddeb2e66908befa8bcc90136d87fee78fec6fad41fb1c79a06f4c74106e1ead501449181ad7b917e8b84e2036e893f3a2839b2794410cbe109a48247f2eb7bf674cff901dc2eb2457def97998c31fa9cbae0214e418eb41d1c0aa3942fc68ba85dfa1770094f2a34472fd882935e26465bf1a96da87d700889f097aa63b94ebcc917883880e725bdbcdeb2eca290ee35bce180ee20be94877a92ddcb1ad6f665daad18ab54d03a903aba3a57953bbbe31df307bb2244625e1b6239e299be329b3e9388fedd2b4ddbf8499ee2741e2843162fdb197740b3fd1a4e", 0xdc, 0x3}, {&(0x7f0000000640)="14ba1c5d92ee4b0980bf7e0d1b6e9c7401d7c6c00a0a1ecab6563f8ac681c1cbc2e36782d30b4213405a90b4d815203bb0c4d7d0231213d5e45f9e017167290309614914bb8a47e545bbcc9b60be2e000c7fc7f1a2fdf7b71e511ef61c16513aa8c97fb4d12be5d332c11aafdcdf4eacfdafef", 0x73}, {&(0x7f00000006c0)="946b9f1b71bfc4874c5a6fa6708bc4", 0xf, 0x5}, {&(0x7f0000000700)="7af6e503396c778540a74c85bae1c7825b95c052cc260a6f8f74c857c31a0d7fc2da00433bd32a968bb4d8f57f3c73ba27653924f364407c4f29c729f3cf06e36a995a5d188546e397f81fb5223774cefd946768e999e98804f3f53bd4218e9ddea3e104e543f7f8211b533c801ec75dad7f20c13136fd5e195b8aab87eeaa0b051f29d4b210924b5b24fc0462b96b7fa0189b70958129c2ccc0d4bf0eb9739388de9356c93f043714c2114af18c61e0d19ca68513ec8e0f951793ca669867ee189bffb8b2075c", 0xc7, 0x8}], 0x100000, &(0x7f0000000880)={[{@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@init_itable}], [{@smackfshat}]})
write$binfmt_script(r2, &(0x7f0000000900)={'#! ', './file0', [{0x20, '--*}+/#}$:'}, {0x20, '\']'}], 0xa, "e6e70804cb2c2e89296b07bd84cf72cb1036d55198184b9eb506897637aafa451701dddc08a46f8f0c6e6e57e1455a7234f3f5996b336abe2395918bc79471ce21d47117df27f737b5959a14588611d6921759918ee38ce637dadd5aa7ba6a3d662b1db6defa052822aeb6936961a0b051f492e693ed6877a2c5a071dfcc417f06e1cddb95"}, 0x9e)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x6c}, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xc0, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xba}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x2000000)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x200, 0x4)
r6 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x37c3, 0x2, 0x800, 0x1}, &(0x7f000014b000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r7=>0x0, &(0x7f0000000180)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x118, &(0x7f00000000c0)=0x42, 0x0, 0x4)
r9 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r6, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0)
setsockopt$inet_int(r10, 0x0, 0xd, &(0x7f0000000100)=0x2, 0x4)
bind$inet(r10, &(0x7f00000009c0)={0x2, 0x4e23, @private=0xa010102}, 0x10)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
creat(&(0x7f00000001c0)='./file0\x00', 0x100) (async)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x5, 0x4, &(0x7f0000000800)=[{&(0x7f0000000540)="394dddeb2e66908befa8bcc90136d87fee78fec6fad41fb1c79a06f4c74106e1ead501449181ad7b917e8b84e2036e893f3a2839b2794410cbe109a48247f2eb7bf674cff901dc2eb2457def97998c31fa9cbae0214e418eb41d1c0aa3942fc68ba85dfa1770094f2a34472fd882935e26465bf1a96da87d700889f097aa63b94ebcc917883880e725bdbcdeb2eca290ee35bce180ee20be94877a92ddcb1ad6f665daad18ab54d03a903aba3a57953bbbe31df307bb2244625e1b6239e299be329b3e9388fedd2b4ddbf8499ee2741e2843162fdb197740b3fd1a4e", 0xdc, 0x3}, {&(0x7f0000000640)="14ba1c5d92ee4b0980bf7e0d1b6e9c7401d7c6c00a0a1ecab6563f8ac681c1cbc2e36782d30b4213405a90b4d815203bb0c4d7d0231213d5e45f9e017167290309614914bb8a47e545bbcc9b60be2e000c7fc7f1a2fdf7b71e511ef61c16513aa8c97fb4d12be5d332c11aafdcdf4eacfdafef", 0x73}, {&(0x7f00000006c0)="946b9f1b71bfc4874c5a6fa6708bc4", 0xf, 0x5}, {&(0x7f0000000700)="7af6e503396c778540a74c85bae1c7825b95c052cc260a6f8f74c857c31a0d7fc2da00433bd32a968bb4d8f57f3c73ba27653924f364407c4f29c729f3cf06e36a995a5d188546e397f81fb5223774cefd946768e999e98804f3f53bd4218e9ddea3e104e543f7f8211b533c801ec75dad7f20c13136fd5e195b8aab87eeaa0b051f29d4b210924b5b24fc0462b96b7fa0189b70958129c2ccc0d4bf0eb9739388de9356c93f043714c2114af18c61e0d19ca68513ec8e0f951793ca669867ee189bffb8b2075c", 0xc7, 0x8}], 0x100000, &(0x7f0000000880)={[{@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@init_itable}], [{@smackfshat}]}) (async)
write$binfmt_script(r2, &(0x7f0000000900)={'#! ', './file0', [{0x20, '--*}+/#}$:'}, {0x20, '\']'}], 0xa, "e6e70804cb2c2e89296b07bd84cf72cb1036d55198184b9eb506897637aafa451701dddc08a46f8f0c6e6e57e1455a7234f3f5996b336abe2395918bc79471ce21d47117df27f737b5959a14588611d6921759918ee38ce637dadd5aa7ba6a3d662b1db6defa052822aeb6936961a0b051f492e693ed6877a2c5a071dfcc417f06e1cddb95"}, 0x9e) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x6c}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xc0, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xba}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x80}, 0x2000000) (async)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140)=0x200, 0x4) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x37c3, 0x2, 0x800, 0x1}, &(0x7f000014b000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x118, &(0x7f00000000c0)=0x42, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r7, r8, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r6, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) (async)
setsockopt$inet_int(r10, 0x0, 0xd, &(0x7f0000000100)=0x2, 0x4) (async)
bind$inet(r10, &(0x7f00000009c0)={0x2, 0x4e23, @private=0xa010102}, 0x10) (async)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:08 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x18010000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:08 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (async)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8, 0x10000, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_setup(0x3e4c, &(0x7f0000000000)={0x0, 0x5f7f, 0x8, 0x1, 0x234, 0x0, r0}, &(0x7f00005f1000/0x4000)=nil, &(0x7f00005f0000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r2, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1}}, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f00000000c0)) (async)
mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2000001, 0x50, r6, 0x8fbdf000) (async)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
write$UHID_INPUT(r5, &(0x7f0000000380)={0x8, {"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", 0x1000}}, 0x1006)
syz_open_pts(r0, 0x0)

17:12:08 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0xd, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1520.002677][T14121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1520.010648][T14121] R13: 00007ffd742bca4f R14: 00007ff2a9ca8300 R15: 0000000000022000
[ 1520.018624][T14121]  </TASK>
17:12:08 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0xfea7) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) (rerun: 32)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x20, 0x8, 0x10000, 0x0, r0}, &(0x7f0000001000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180))
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_setup(0x3e4c, &(0x7f0000000000)={0x0, 0x5f7f, 0x8, 0x1, 0x234, 0x0, r0}, &(0x7f00005f1000/0x4000)=nil, &(0x7f00005f0000/0x2000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r2, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f00000000c0)) (async, rerun: 32)
mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2000001, 0x50, r6, 0x8fbdf000) (async, rerun: 32)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
write$UHID_INPUT(r5, &(0x7f0000000380)={0x8, {"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", 0x1000}}, 0x1006)
syz_open_pts(r0, 0x0)

17:12:08 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0xf, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:08 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={<r4=>r0, 0x5, 0x100000001, 0x80})
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x145002, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[r5]}, 0x1)

[ 1520.063358][T14178] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1520.064683][T14181] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1520.133811][T14181] FAULT_INJECTION: forcing a failure.
[ 1520.133811][T14181] name failslab, interval 1, probability 0, space 0, times 0
[ 1520.146479][T14181] CPU: 1 PID: 14181 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller-00235-g22da5264abf4-dirty #0
[ 1520.157504][T14181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1520.167623][T14181] Call Trace:
[ 1520.170954][T14181]  <TASK>
[ 1520.173880][T14181]  dump_stack_lvl+0xd6/0x122
[ 1520.178482][T14181]  dump_stack+0x11/0x12
[ 1520.182660][T14181]  should_fail+0x230/0x240
[ 1520.187116][T14181]  __should_failslab+0x81/0x90
[ 1520.191919][T14181]  ? skb_clone+0x12c/0x1e0
[ 1520.196387][T14181]  should_failslab+0x5/0x20
[ 1520.200950][T14181]  kmem_cache_alloc+0x46/0x300
[ 1520.205727][T14181]  skb_clone+0x12c/0x1e0
[ 1520.210074][T14181]  __netlink_deliver_tap+0x28b/0x4c0
[ 1520.215421][T14181]  netlink_sendskb+0x11e/0x140
[ 1520.220202][T14181]  netlink_unicast+0x29a/0x660
[ 1520.225119][T14181]  netlink_ack+0x606/0x650
[ 1520.229535][T14181]  netlink_rcv_skb+0x1b7/0x240
[ 1520.234307][T14181]  ? rtnetlink_bind+0x60/0x60
[ 1520.238983][T14181]  rtnetlink_rcv+0x18/0x20
[ 1520.243405][T14181]  netlink_unicast+0x58a/0x660
[ 1520.248169][T14181]  netlink_sendmsg+0x661/0x750
[ 1520.252981][T14181]  ? netlink_getsockopt+0x6c0/0x6c0
[ 1520.258188][T14181]  ____sys_sendmsg+0x38f/0x500
[ 1520.263036][T14181]  __sys_sendmsg+0x195/0x230
[ 1520.267703][T14181]  __x64_sys_sendmsg+0x42/0x50
[ 1520.272538][T14181]  do_syscall_64+0x2b/0x70
[ 1520.276960][T14181]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1520.282856][T14181] RIP: 0033:0x7ff2aa5320e9
[ 1520.287266][T14181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1520.306911][T14181] RSP: 002b:00007ff2a9ca8168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1520.315328][T14181] RAX: ffffffffffffffda RBX: 00007ff2aa644f60 RCX: 00007ff2aa5320e9
[ 1520.323300][T14181] RDX: 0000000000000000 RSI: 0000000020012240 RDI: 0000000000000003
[ 1520.331298][T14181] RBP: 00007ff2a9ca81d0 R08: 0000000000000000 R09: 0000000000000000
[ 1520.339273][T14181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1520.347457][T14181] R13: 00007ffd742bca4f R14: 00007ff2a9ca8300 R15: 0000000000022000
[ 1520.355435][T14181]  </TASK>
17:12:09 executing program 2:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0xa8714, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) (async)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0xd5c4, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r4 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000380)={{0x4, @loopback, 0x4e21, 0x0, 'rr\x00', 0x2d, 0x7, 0x5e}, {@multicast1, 0x4e23, 0x1, 0x4, 0x9, 0x7cb3ac9b}}, 0x44) (async)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:09 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x10, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:09 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
sendto$inet(r5, &(0x7f0000000400)="4cafba7c6d21ef8dce4002a6401edcb498d2e23576d8b96de6d56bd15e63e799de77f6dcd4fa3fd7015fd3743dbf2a9ff386d8b1202794924450bd49a74a65aa2776d482d673e9ea8008eb6271ef642b564385ff7b", 0x55, 0x0, 0x0, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c0009000000050016000100000008001500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e848725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93722f7b2248ae0ebadc84c77f36c4eb5e529bd07bde92fc55bf1be6ffefee8f9e"], 0x9c}}, 0x20009000)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000040)={@dev, @multicast2, <r7=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x400c5)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:09 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x20000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (fail_nth: 12)

17:12:09 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={<r4=>r0, 0x5, 0x100000001, 0x80})
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x145002, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[r5]}, 0x1)

17:12:09 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x11, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:09 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async)
sendto$inet(r5, &(0x7f0000000400)="4cafba7c6d21ef8dce4002a6401edcb498d2e23576d8b96de6d56bd15e63e799de77f6dcd4fa3fd7015fd3743dbf2a9ff386d8b1202794924450bd49a74a65aa2776d482d673e9ea8008eb6271ef642b564385ff7b", 0x55, 0x0, 0x0, 0x0) (async)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c0009000000050016000100000008001500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e848725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93722f7b2248ae0ebadc84c77f36c4eb5e529bd07bde92fc55bf1be6ffefee8f9e"], 0x9c}}, 0x20009000) (async)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000040)={@dev, @multicast2, <r7=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x400c5)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:09 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x22010000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1520.572650][T14225] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1520.589862][T14226] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1520.596615][T14230] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20001
17:12:09 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async)
sendto$inet(r5, &(0x7f0000000400)="4cafba7c6d21ef8dce4002a6401edcb498d2e23576d8b96de6d56bd15e63e799de77f6dcd4fa3fd7015fd3743dbf2a9ff386d8b1202794924450bd49a74a65aa2776d482d673e9ea8008eb6271ef642b564385ff7b", 0x55, 0x0, 0x0, 0x0) (async)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c0009000000050016000100000008001500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e848725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93722f7b2248ae0ebadc84c77f36c4eb5e529bd07bde92fc55bf1be6ffefee8f9e"], 0x9c}}, 0x20009000) (async)
getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000040)={@dev, @multicast2, <r7=>0x0}, &(0x7f00000000c0)=0xc)
sendmsg$nl_route(r6, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x10, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x400c5) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

[ 1520.618839][T14226] FAULT_INJECTION: forcing a failure.
[ 1520.618839][T14226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1520.632093][T14226] CPU: 1 PID: 14226 Comm: syz-executor.3 Not tainted 5.18.0-rc3-syzkaller-00235-g22da5264abf4-dirty #0
[ 1520.643118][T14226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1520.653178][T14226] Call Trace:
[ 1520.656463][T14226]  <TASK>
[ 1520.659397][T14226]  dump_stack_lvl+0xd6/0x122
[ 1520.664001][T14226]  dump_stack+0x11/0x12
[ 1520.668165][T14226]  should_fail+0x230/0x240
17:12:09 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
io_uring_enter(r4, 0x3916, 0xe501, 0x2, &(0x7f0000000280)={[0x80]}, 0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, r3], 0x2, 0x0, 0x1}, 0x2)
r5 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0xfea7)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0xee01}}, './file0\x00'})
setsockopt$sock_int(r7, 0x1, 0x2b, &(0x7f00000001c0)=0x80000001, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

[ 1520.672619][T14226]  should_fail_usercopy+0x16/0x20
[ 1520.677684][T14226]  _copy_to_user+0x1a/0x90
[ 1520.682117][T14226]  simple_read_from_buffer+0xab/0x120
[ 1520.687551][T14226]  proc_fail_nth_read+0x10d/0x150
[ 1520.692638][T14226]  ? proc_fault_inject_write+0x230/0x230
[ 1520.698394][T14226]  vfs_read+0x1a1/0x6a0
[ 1520.702561][T14226]  ? __fget_files+0x1d2/0x210
[ 1520.707249][T14226]  ksys_read+0xe8/0x1a0
[ 1520.711519][T14226]  __x64_sys_read+0x3e/0x50
[ 1520.716394][T14226]  do_syscall_64+0x2b/0x70
[ 1520.720869][T14226]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1520.726776][T14226] RIP: 0033:0x7ff2aa4e4c9c
[ 1520.731192][T14226] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1520.750802][T14226] RSP: 002b:00007ff2a9ca8160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1520.759222][T14226] RAX: ffffffffffffffda RBX: 00007ff2aa644f60 RCX: 00007ff2aa4e4c9c
17:12:09 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x12, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:09 executing program 2:
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0xa8714, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) (async)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0xd5c4, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r4 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000380)={{0x4, @loopback, 0x4e21, 0x0, 'rr\x00', 0x2d, 0x7, 0x5e}, {@multicast1, 0x4e23, 0x1, 0x4, 0x9, 0x7cb3ac9b}}, 0x44)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1520.767242][T14226] RDX: 000000000000000f RSI: 00007ff2a9ca81e0 RDI: 0000000000000004
[ 1520.775229][T14226] RBP: 00007ff2a9ca81d0 R08: 0000000000000000 R09: 0000000000000000
[ 1520.783374][T14226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1520.791359][T14226] R13: 00007ffd742bca4f R14: 00007ff2a9ca8300 R15: 0000000000022000
[ 1520.799343][T14226]  </TASK>
17:12:09 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
io_uring_enter(r4, 0x3916, 0xe501, 0x2, &(0x7f0000000280)={[0x80]}, 0x8) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, r3], 0x2, 0x0, 0x1}, 0x2) (async)
r5 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0xee01}}, './file0\x00'})
setsockopt$sock_int(r7, 0x1, 0x2b, &(0x7f00000001c0)=0x80000001, 0x4) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:09 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x13, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:09 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async, rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (rerun: 32)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
io_uring_enter(r4, 0x3916, 0xe501, 0x2, &(0x7f0000000280)={[0x80]}, 0x8) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff, r3], 0x2, 0x0, 0x1}, 0x2)
r5 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r7=>0xffffffffffffffff, {0xee01}}, './file0\x00'})
setsockopt$sock_int(r7, 0x1, 0x2b, &(0x7f00000001c0)=0x80000001, 0x4) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

[ 1520.827569][T14253] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1520.836708][T14256] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1520.848776][T14261] IPVS: set_ctl: invalid protocol: 4 127.0.0.1:20001
17:12:09 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={<r4=>r0, 0x5, 0x100000001, 0x80})
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x145002, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[r5]}, 0x1)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000000)={r0, 0x5, 0x100000001, 0x80}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x145002, 0x0) (async)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[r5]}, 0x1) (async)

17:12:09 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x14, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:09 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x22030000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:09 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:09 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x106)
syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r8, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x3}}, 0x200)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:09 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x15, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:09 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async, rerun: 32)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0) (async, rerun: 32)
r7 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x106)
syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r8, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x3}}, 0x200) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

[ 1520.954279][T14282] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1520.963380][T14283] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:10 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=""/143, 0x8f}], 0x1}, 0x0, 0x10000, 0x0, {0x2}}, 0x3)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x2, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:10 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x25000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:10 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x16, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:10 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async, rerun: 64)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0) (async)
r7 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r8 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x106)
syz_io_uring_submit(r5, r2, &(0x7f0000000040)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r8, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x3}}, 0x200) (async, rerun: 32)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (rerun: 32)

17:12:10 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
r4 = socket$caif_stream(0x25, 0x1, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3a699f27db7c6e35, 0x0, r4, 0x80, &(0x7f0000000100)=@isdn={0x22, 0x40, 0x0, 0x3, 0x1f}, 0x0, 0x0, 0x1}, 0x7b7)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:10 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x17, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:10 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x18, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:10 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x60d}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
r4 = accept4(r3, &(0x7f0000000000)=@xdp, &(0x7f00000000c0)=0x80, 0x800)
sendto$inet(r4, &(0x7f0000000380)="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", 0x1000, 0x2, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
io_uring_enter(r0, 0x845f5, 0x0, 0x0, 0x0, 0x0)

17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x3, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1521.249516][T14303] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1521.264045][T14307] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:10 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x29000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:10 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x60d}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
r4 = accept4(r3, &(0x7f0000000000)=@xdp, &(0x7f00000000c0)=0x80, 0x800)
sendto$inet(r4, &(0x7f0000000380)="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", 0x1000, 0x2, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
io_uring_enter(r0, 0x845f5, 0x0, 0x0, 0x0, 0x0)

[ 1521.332409][T14324] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1521.341019][T14326] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1521.640552][T14318] net_ratelimit: 4746 callbacks suppressed
[ 1521.640571][T14318] dccp_time_wait: time wait bucket table overflow
[ 1521.653578][T14318] dccp_time_wait: time wait bucket table overflow
[ 1521.661394][T14318] dccp_time_wait: time wait bucket table overflow
[ 1521.669390][T14318] dccp_time_wait: time wait bucket table overflow
[ 1521.676320][T14318] dccp_time_wait: time wait bucket table overflow
[ 1521.684105][T14318] dccp_time_wait: time wait bucket table overflow
17:12:10 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=""/143, 0x8f}], 0x1}, 0x0, 0x10000, 0x0, {0x2}}, 0x3) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:10 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x19, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x4, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:10 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x60d}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
r4 = accept4(r3, &(0x7f0000000000)=@xdp, &(0x7f00000000c0)=0x80, 0x800)
sendto$inet(r4, &(0x7f0000000380)="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", 0x1000, 0x2, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
io_uring_enter(r0, 0x845f5, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x60d}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
accept4(r3, &(0x7f0000000000)=@xdp, &(0x7f00000000c0)=0x80, 0x800) (async)
sendto$inet(r4, &(0x7f0000000380)="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", 0x1000, 0x2, &(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async)
io_uring_enter(r0, 0x845f5, 0x0, 0x0, 0x0, 0x0) (async)

17:12:10 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x2c000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:10 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
r4 = socket$caif_stream(0x25, 0x1, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3a699f27db7c6e35, 0x0, r4, 0x80, &(0x7f0000000100)=@isdn={0x22, 0x40, 0x0, 0x3, 0x1f}, 0x0, 0x0, 0x1}, 0x7b7)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
socket$caif_stream(0x25, 0x1, 0x1) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3a699f27db7c6e35, 0x0, r4, 0x80, &(0x7f0000000100)=@isdn={0x22, 0x40, 0x0, 0x3, 0x1f}, 0x0, 0x0, 0x1}, 0x7b7) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

[ 1521.691175][T14318] dccp_time_wait: time wait bucket table overflow
[ 1521.698531][T14318] dccp_time_wait: time wait bucket table overflow
[ 1521.705744][T14318] dccp_time_wait: time wait bucket table overflow
[ 1521.713383][T14318] dccp_time_wait: time wait bucket table overflow
17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x5, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:10 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x1a, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:10 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c0009000000050016000100000008001500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e848725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93722f7b2248ae0ebadc84c77f36c4eb5e529bd07bde92fc55bf1be6ffefee8f9e"], 0x9c}}, 0x20009000)
syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4007, @fd_index=0x2, 0x7, &(0x7f0000000380)=""/147, 0x93, 0x1, 0x1}, 0x10001)
sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x34, 0x6, 0x0, 0x0, 0xff, 0x1}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x80)
getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000280)=0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
socket$inet(0x2, 0x800, 0x9)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x6, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:10 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x34000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1521.753084][T14353] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x7, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:10 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=""/143, 0x8f}], 0x1}, 0x0, 0x10000, 0x0, {0x2}}, 0x3) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:10 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x21, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x8, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:10 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x48000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x9, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:10 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x22, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:10 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
r4 = socket$caif_stream(0x25, 0x1, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3a699f27db7c6e35, 0x0, r4, 0x80, &(0x7f0000000100)=@isdn={0x22, 0x40, 0x0, 0x3, 0x1f}, 0x0, 0x0, 0x1}, 0x7b7)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
socket$caif_stream(0x25, 0x1, 0x1) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x3a699f27db7c6e35, 0x0, r4, 0x80, &(0x7f0000000100)=@isdn={0x22, 0x40, 0x0, 0x3, 0x1f}, 0x0, 0x0, 0x1}, 0x7b7) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:10 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x4c000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:10 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = socket$inet(0x2, 0x6, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c0009000000050016000100000008001500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e848725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93722f7b2248ae0ebadc84c77f36c4eb5e529bd07bde92fc55bf1be6ffefee8f9e"], 0x9c}}, 0x20009000)
syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4007, @fd_index=0x2, 0x7, &(0x7f0000000380)=""/147, 0x93, 0x1, 0x1}, 0x10001) (async)
sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x34, 0x6, 0x0, 0x0, 0xff, 0x1}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x80)
getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000280)=0x8) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
socket$inet(0x2, 0x800, 0x9) (async, rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (rerun: 64)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xa, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:10 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c0009000000050016000100000008001500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e848725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93722f7b2248ae0ebadc84c77f36c4eb5e529bd07bde92fc55bf1be6ffefee8f9e"], 0x9c}}, 0x20009000)
syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4007, @fd_index=0x2, 0x7, &(0x7f0000000380)=""/147, 0x93, 0x1, 0x1}, 0x10001)
sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x34, 0x6, 0x0, 0x0, 0xff, 0x1}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x80)
getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000280)=0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
socket$inet(0x2, 0x800, 0x9)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
socket$inet(0x2, 0x6, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c0009000000050016000100000008001500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e848725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93722f7b2248ae0ebadc84c77f36c4eb5e529bd07bde92fc55bf1be6ffefee8f9e"], 0x9c}}, 0x20009000) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x4007, @fd_index=0x2, 0x7, &(0x7f0000000380)=""/147, 0x93, 0x1, 0x1}, 0x10001) (async)
sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd29, 0x25dfdbff, {0x2, 0x0, 0x34, 0x6, 0x0, 0x0, 0xff, 0x1}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x80) (async)
getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000280)=0x8) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
socket$inet(0x2, 0x800, 0x9) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)

17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xb, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:10 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0xfffffff9, 0x113}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', {}, 0x3})

17:12:10 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x23, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:10 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x4f020000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xc, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:10 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x55020000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:10 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x5f030000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:10 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x24, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xd, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:10 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x60000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:10 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0xfffffff9, 0x113}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', {}, 0x3})

17:12:10 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r3, r7, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x2000, 0x12345}, 0x7)
r9 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:10 executing program 5:
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000180)=<r1=>0x0)
r2 = socket$inet(0x2, 0x6, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000000c0))
write(r3, &(0x7f0000000000)="b5d12caeace026a011fb54b1fba42a6ccb8f6f194a7f1184cb52beaf58c7db1ff678a291e588e8dda4ab1922effeb057f39b8d9a1c67d9780a", 0x39)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x0)

17:12:10 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xe, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:10 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r3, r7, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x2000, 0x12345}, 0x7)
r9 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r3, r7, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x2000, 0x12345}, 0x7) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:10 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x62010000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:10 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x25, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:10 executing program 5:
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000180)=<r1=>0x0) (async, rerun: 64)
r2 = socket$inet(0x2, 0x6, 0x0) (rerun: 64)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000000c0))
write(r3, &(0x7f0000000000)="b5d12caeace026a011fb54b1fba42a6ccb8f6f194a7f1184cb52beaf58c7db1ff678a291e588e8dda4ab1922effeb057f39b8d9a1c67d9780a", 0x39)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async, rerun: 32)
io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x0)

17:12:10 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0xfffffff9, 0x113}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async, rerun: 64)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 64)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x1, 'veth0_to_batadv\x00', {}, 0x3})

17:12:10 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x26, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xf, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:11 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0) (async)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async, rerun: 32)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async, rerun: 32)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0) (async)
r8 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r3, r7, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x2000, 0x12345}, 0x7)
r9 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0) (async, rerun: 64)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 64)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:11 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x62020000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:11 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x7822, &(0x7f0000000100)={0x0, 0x4052, 0x2, 0x0, 0x369}, &(0x7f00005ef000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000280)=<r4=>0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {<r5=>r3}}, './file0\x00'})
r6 = socket$l2tp(0x2, 0x2, 0x73)
syz_io_uring_submit(r1, r4, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r5, 0x0, r6, 0x2, 0x0, 0x1}, 0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:11 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x27, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x10, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:11 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x68000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x11, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:11 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000000)=0x3f, 0x4)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:11 executing program 5:
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000180)=<r1=>0x0)
r2 = socket$inet(0x2, 0x6, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000000c0))
write(r3, &(0x7f0000000000)="b5d12caeace026a011fb54b1fba42a6ccb8f6f194a7f1184cb52beaf58c7db1ff678a291e588e8dda4ab1922effeb057f39b8d9a1c67d9780a", 0x39)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
socket$inet(0x2, 0x6, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000000c0)) (async)
write(r3, &(0x7f0000000000)="b5d12caeace026a011fb54b1fba42a6ccb8f6f194a7f1184cb52beaf58c7db1ff678a291e588e8dda4ab1922effeb057f39b8d9a1c67d9780a", 0x39) (async)
bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
io_uring_enter(r4, 0x45f5, 0x0, 0x0, 0x0, 0x0) (async)

17:12:11 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x28, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:11 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x6c000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x12, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:11 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x74000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:11 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x29, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:11 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async, rerun: 64)
r3 = socket$inet(0x2, 0x6, 0x0) (rerun: 64)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x7822, &(0x7f0000000100)={0x0, 0x4052, 0x2, 0x0, 0x369}, &(0x7f00005ef000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000280)=<r4=>0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {<r5=>r3}}, './file0\x00'}) (async)
r6 = socket$l2tp(0x2, 0x2, 0x73)
syz_io_uring_submit(r1, r4, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r5, 0x0, r6, 0x2, 0x0, 0x1}, 0x8) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async, rerun: 64)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 64)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x25, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:11 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x2a, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:11 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x7a000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:11 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x2b, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:11 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000000)=0x3f, 0x4) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:11 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x88000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:11 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x2c, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x48, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:11 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x7822, &(0x7f0000000100)={0x0, 0x4052, 0x2, 0x0, 0x369}, &(0x7f00005ef000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000280)=<r4=>0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {<r5=>r3}}, './file0\x00'}) (async)
r6 = socket$l2tp(0x2, 0x2, 0x73)
syz_io_uring_submit(r1, r4, &(0x7f00000003c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r5, 0x0, r6, 0x2, 0x0, 0x1}, 0x8)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x4c, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:11 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x2d, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:11 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x8f030000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x60, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x68, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:11 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in}, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x1a0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, &(0x7f0000000480), {[{{@ip={@empty, @private=0xa010102, 0xffffffff, 0xff, 'xfrm0\x00', 'team0\x00', {}, {0xff}, 0x32, 0xd4dfabf7b5418c4, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x50d, 0x8, [0x39, 0x1b, 0x15, 0xe, 0x33, 0x1c, 0x14, 0x15, 0xb, 0x28, 0x3a, 0x13, 0x1e, 0x38, 0x36, 0xf], 0x0, 0x8001, 0xe2f9}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0xff000000, 0xff, 'veth1_vlan\x00', 'netpci0\x00', {}, {0xff}, 0x2, 0x1, 0x60}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x13, 0x2, [0x30, 0xe, 0x37, 0x14, 0x39, 0x30, 0x3f, 0x33, 0x12, 0x37, 0x1d, 0x13, 0x9, 0x12, 0x3f, 0x35], 0x1, 0x891, 0x7}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffffff, 0xff, 'macvlan1\x00', 'rose0\x00', {}, {0xff}, 0x1, 0x2}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x1, 0x5, 0x5, 0x6, 0x4], 0x1, 0x7}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff00, 0xffffff00], 0x4e20, 0x4e23, 0x4e21, 0x4e20, 0x9, 0xf5, 0x8f2, 0xe4, 0x3ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000003c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x0, 0x0, 0x1}, 0x7fffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
syz_io_uring_setup(0x5d61, &(0x7f0000000000)={0x0, 0x295f, 0x10, 0x3, 0x1e7, 0x0, r6}, &(0x7f000014a000/0x4000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f00000000c0)=<r7=>0x0, &(0x7f00000001c0))
r8 = mmap$IORING_OFF_SQES(&(0x7f0000149000/0x1000)=nil, 0x1000, 0xc, 0x30, r6, 0x10000000)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r9}}, 0xffffffff)
write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0xfea7)
io_uring_enter(r6, 0x127e, 0x535a, 0x1, &(0x7f0000000380)={[0x7]}, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d00)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r6, 0x0, &(0x7f0000000cc0)={&(0x7f0000000880)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)="0d89d91b77b559d9839e9b594a1d1af77b4557a2dff1ef0e24caf9230911a502621e1f03629c782c4c61f722a5d05d0239296f6f03e4f03c33ca21268898cd5dcc29022bdbb30dff4bd92ef697b445ec858f04b766b5073f98bce46f208f3f7bf577e64da3a7f529901509ffb4b6a2a535e7915d07c2035779b7551842409188d739d67ab72ef7bff1cd8522d09d7c42916dc9b129f8fd7fd6b97ec73ee48968128eb989acd3a67097950d32", 0xac}], 0x1, &(0x7f0000000a00)=[{0xb0, 0x17, 0x4, "655b2e1ed2960bfa61f9865a343ae3b6441da920308957000a97eed3dec35d18565febd0766fa793e2c31d40129ed5e7e44f099068a50e20ba1f85b4bbd03fff0eec981dda04244001771ae91184d50ef4f7c7030cad64919883ccbece7586428e2f54492a9da01c337d81a1e763a88dc56f0797f07ae5a4ceba747dff15056673877e8638dfc216590471bf930e8f5e47aa1742b84434d75c02473fd6"}, {0xf0, 0x88, 0x6, "62aca5d50a6dbd85e56aa4b6ebc35dc278c18da6d3f95a28aad1b71c259056f662e266262692f64991de6a88abc48c33e20b4c22ffbb93104b2bf40683c978c1ba1bb444246e298ee66fb45f550badb4d0ef48dbb645123205bd492278ddd07fb224aae10f092974f89ec7115158692ea1c10780203a6abf5d227ed5a7b1f90d7dd0a095e4edddf5a13a0bec42ce4d6051d2479024365ad0bb5fec110bf3705b20910e6fb549693237e59f3845f7a6e1f1411e188eb73d82127c77ec967591a934054997eb047af8c6d2c01731ec0d2543e4a70b167fb1127d25a20b7f"}, {0x70, 0x288, 0x4, "fa9ea089f4da27bfd07b142166adeb86769ff8137f63874888c4ba4e5fd5eec52284c878cab72be4fb278c2874463296ac874cae2ac4a75d086db3867899322de47b199670d9fdd0baf8bdea7e7f0153d898b444fe680adbe79a"}, {0x80, 0x110, 0x0, "fbb5d83aa5db7f80a0d4d62cdbfff9524abbfdcfd89d8c098661ed928e8da3f0d7e602ef904786d0aaf78c53891e5d22d1665eb4c8c476eea1f4d0e86755c2fdc47ea256484ed0db43429e9626066e194906979213be0bdb02a042ebc8794dc99bf3c72f26981d20cd91b3"}], 0x290}, 0x0, 0x8040, 0x1}, 0xffff)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:11 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xae000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:11 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000000)=0x3f, 0x4) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x6c, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:11 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0) (async)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x1a0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, &(0x7f0000000480), {[{{@ip={@empty, @private=0xa010102, 0xffffffff, 0xff, 'xfrm0\x00', 'team0\x00', {}, {0xff}, 0x32, 0xd4dfabf7b5418c4, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x50d, 0x8, [0x39, 0x1b, 0x15, 0xe, 0x33, 0x1c, 0x14, 0x15, 0xb, 0x28, 0x3a, 0x13, 0x1e, 0x38, 0x36, 0xf], 0x0, 0x8001, 0xe2f9}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0xff000000, 0xff, 'veth1_vlan\x00', 'netpci0\x00', {}, {0xff}, 0x2, 0x1, 0x60}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x13, 0x2, [0x30, 0xe, 0x37, 0x14, 0x39, 0x30, 0x3f, 0x33, 0x12, 0x37, 0x1d, 0x13, 0x9, 0x12, 0x3f, 0x35], 0x1, 0x891, 0x7}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffffff, 0xff, 'macvlan1\x00', 'rose0\x00', {}, {0xff}, 0x1, 0x2}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x1, 0x5, 0x5, 0x6, 0x4], 0x1, 0x7}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff00, 0xffffff00], 0x4e20, 0x4e23, 0x4e21, 0x4e20, 0x9, 0xf5, 0x8f2, 0xe4, 0x3ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000003c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x0, 0x0, 0x1}, 0x7fffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
syz_io_uring_setup(0x5d61, &(0x7f0000000000)={0x0, 0x295f, 0x10, 0x3, 0x1e7, 0x0, r6}, &(0x7f000014a000/0x4000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f00000000c0)=<r7=>0x0, &(0x7f00000001c0)) (async)
r8 = mmap$IORING_OFF_SQES(&(0x7f0000149000/0x1000)=nil, 0x1000, 0xc, 0x30, r6, 0x10000000) (async)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r9}}, 0xffffffff) (async)
write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
io_uring_enter(r6, 0x127e, 0x535a, 0x1, &(0x7f0000000380)={[0x7]}, 0x8) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d00)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r6, 0x0, &(0x7f0000000cc0)={&(0x7f0000000880)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)="0d89d91b77b559d9839e9b594a1d1af77b4557a2dff1ef0e24caf9230911a502621e1f03629c782c4c61f722a5d05d0239296f6f03e4f03c33ca21268898cd5dcc29022bdbb30dff4bd92ef697b445ec858f04b766b5073f98bce46f208f3f7bf577e64da3a7f529901509ffb4b6a2a535e7915d07c2035779b7551842409188d739d67ab72ef7bff1cd8522d09d7c42916dc9b129f8fd7fd6b97ec73ee48968128eb989acd3a67097950d32", 0xac}], 0x1, &(0x7f0000000a00)=[{0xb0, 0x17, 0x4, "655b2e1ed2960bfa61f9865a343ae3b6441da920308957000a97eed3dec35d18565febd0766fa793e2c31d40129ed5e7e44f099068a50e20ba1f85b4bbd03fff0eec981dda04244001771ae91184d50ef4f7c7030cad64919883ccbece7586428e2f54492a9da01c337d81a1e763a88dc56f0797f07ae5a4ceba747dff15056673877e8638dfc216590471bf930e8f5e47aa1742b84434d75c02473fd6"}, {0xf0, 0x88, 0x6, "62aca5d50a6dbd85e56aa4b6ebc35dc278c18da6d3f95a28aad1b71c259056f662e266262692f64991de6a88abc48c33e20b4c22ffbb93104b2bf40683c978c1ba1bb444246e298ee66fb45f550badb4d0ef48dbb645123205bd492278ddd07fb224aae10f092974f89ec7115158692ea1c10780203a6abf5d227ed5a7b1f90d7dd0a095e4edddf5a13a0bec42ce4d6051d2479024365ad0bb5fec110bf3705b20910e6fb549693237e59f3845f7a6e1f1411e188eb73d82127c77ec967591a934054997eb047af8c6d2c01731ec0d2543e4a70b167fb1127d25a20b7f"}, {0x70, 0x288, 0x4, "fa9ea089f4da27bfd07b142166adeb86769ff8137f63874888c4ba4e5fd5eec52284c878cab72be4fb278c2874463296ac874cae2ac4a75d086db3867899322de47b199670d9fdd0baf8bdea7e7f0153d898b444fe680adbe79a"}, {0x80, 0x110, 0x0, "fbb5d83aa5db7f80a0d4d62cdbfff9524abbfdcfd89d8c098661ed928e8da3f0d7e602ef904786d0aaf78c53891e5d22d1665eb4c8c476eea1f4d0e86755c2fdc47ea256484ed0db43429e9626066e194906979213be0bdb02a042ebc8794dc99bf3c72f26981d20cd91b3"}], 0x290}, 0x0, 0x8040, 0x1}, 0xffff) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:11 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xb0010000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:11 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'lo\x00', 0x3}, 0x18)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:11 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x2e, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:11 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xb2010000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x74, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:11 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in}, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x1a0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, &(0x7f0000000480), {[{{@ip={@empty, @private=0xa010102, 0xffffffff, 0xff, 'xfrm0\x00', 'team0\x00', {}, {0xff}, 0x32, 0xd4dfabf7b5418c4, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x50d, 0x8, [0x39, 0x1b, 0x15, 0xe, 0x33, 0x1c, 0x14, 0x15, 0xb, 0x28, 0x3a, 0x13, 0x1e, 0x38, 0x36, 0xf], 0x0, 0x8001, 0xe2f9}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0xff000000, 0xff, 'veth1_vlan\x00', 'netpci0\x00', {}, {0xff}, 0x2, 0x1, 0x60}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x13, 0x2, [0x30, 0xe, 0x37, 0x14, 0x39, 0x30, 0x3f, 0x33, 0x12, 0x37, 0x1d, 0x13, 0x9, 0x12, 0x3f, 0x35], 0x1, 0x891, 0x7}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffffff, 0xff, 'macvlan1\x00', 'rose0\x00', {}, {0xff}, 0x1, 0x2}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x1, 0x5, 0x5, 0x6, 0x4], 0x1, 0x7}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff00, 0xffffff00], 0x4e20, 0x4e23, 0x4e21, 0x4e20, 0x9, 0xf5, 0x8f2, 0xe4, 0x3ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000003c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x0, 0x0, 0x1}, 0x7fffffff)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
syz_io_uring_setup(0x5d61, &(0x7f0000000000)={0x0, 0x295f, 0x10, 0x3, 0x1e7, 0x0, r6}, &(0x7f000014a000/0x4000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f00000000c0)=<r7=>0x0, &(0x7f00000001c0))
r8 = mmap$IORING_OFF_SQES(&(0x7f0000149000/0x1000)=nil, 0x1000, 0xc, 0x30, r6, 0x10000000)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r9}}, 0xffffffff)
write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0xfea7)
io_uring_enter(r6, 0x127e, 0x535a, 0x1, &(0x7f0000000380)={[0x7]}, 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d00)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r6, 0x0, &(0x7f0000000cc0)={&(0x7f0000000880)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)="0d89d91b77b559d9839e9b594a1d1af77b4557a2dff1ef0e24caf9230911a502621e1f03629c782c4c61f722a5d05d0239296f6f03e4f03c33ca21268898cd5dcc29022bdbb30dff4bd92ef697b445ec858f04b766b5073f98bce46f208f3f7bf577e64da3a7f529901509ffb4b6a2a535e7915d07c2035779b7551842409188d739d67ab72ef7bff1cd8522d09d7c42916dc9b129f8fd7fd6b97ec73ee48968128eb989acd3a67097950d32", 0xac}], 0x1, &(0x7f0000000a00)=[{0xb0, 0x17, 0x4, "655b2e1ed2960bfa61f9865a343ae3b6441da920308957000a97eed3dec35d18565febd0766fa793e2c31d40129ed5e7e44f099068a50e20ba1f85b4bbd03fff0eec981dda04244001771ae91184d50ef4f7c7030cad64919883ccbece7586428e2f54492a9da01c337d81a1e763a88dc56f0797f07ae5a4ceba747dff15056673877e8638dfc216590471bf930e8f5e47aa1742b84434d75c02473fd6"}, {0xf0, 0x88, 0x6, "62aca5d50a6dbd85e56aa4b6ebc35dc278c18da6d3f95a28aad1b71c259056f662e266262692f64991de6a88abc48c33e20b4c22ffbb93104b2bf40683c978c1ba1bb444246e298ee66fb45f550badb4d0ef48dbb645123205bd492278ddd07fb224aae10f092974f89ec7115158692ea1c10780203a6abf5d227ed5a7b1f90d7dd0a095e4edddf5a13a0bec42ce4d6051d2479024365ad0bb5fec110bf3705b20910e6fb549693237e59f3845f7a6e1f1411e188eb73d82127c77ec967591a934054997eb047af8c6d2c01731ec0d2543e4a70b167fb1127d25a20b7f"}, {0x70, 0x288, 0x4, "fa9ea089f4da27bfd07b142166adeb86769ff8137f63874888c4ba4e5fd5eec52284c878cab72be4fb278c2874463296ac874cae2ac4a75d086db3867899322de47b199670d9fdd0baf8bdea7e7f0153d898b444fe680adbe79a"}, {0x80, 0x110, 0x0, "fbb5d83aa5db7f80a0d4d62cdbfff9524abbfdcfd89d8c098661ed928e8da3f0d7e602ef904786d0aaf78c53891e5d22d1665eb4c8c476eea1f4d0e86755c2fdc47ea256484ed0db43429e9626066e194906979213be0bdb02a042ebc8794dc99bf3c72f26981d20cd91b3"}], 0x290}, 0x0, 0x8040, 0x1}, 0xffff)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x348, 0xffffffff, 0x1a0, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, &(0x7f0000000480), {[{{@ip={@empty, @private=0xa010102, 0xffffffff, 0xff, 'xfrm0\x00', 'team0\x00', {}, {0xff}, 0x32, 0xd4dfabf7b5418c4, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @broadcast, 0x50d, 0x8, [0x39, 0x1b, 0x15, 0xe, 0x33, 0x1c, 0x14, 0x15, 0xb, 0x28, 0x3a, 0x13, 0x1e, 0x38, 0x36, 0xf], 0x0, 0x8001, 0xe2f9}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @loopback, 0xff000000, 0xff, 'veth1_vlan\x00', 'netpci0\x00', {}, {0xff}, 0x2, 0x1, 0x60}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x13, 0x2, [0x30, 0xe, 0x37, 0x14, 0x39, 0x30, 0x3f, 0x33, 0x12, 0x37, 0x1d, 0x13, 0x9, 0x12, 0x3f, 0x35], 0x1, 0x891, 0x7}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffffff, 0xff, 'macvlan1\x00', 'rose0\x00', {}, {0xff}, 0x1, 0x2}, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x1, 0x5, 0x5, 0x6, 0x4], 0x1, 0x7}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff00, 0xffffff00], 0x4e20, 0x4e23, 0x4e21, 0x4e20, 0x9, 0xf5, 0x8f2, 0xe4, 0x3ff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000003c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x0, 0x0, 0x1}, 0x7fffffff) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
syz_io_uring_setup(0x5d61, &(0x7f0000000000)={0x0, 0x295f, 0x10, 0x3, 0x1e7, 0x0, r6}, &(0x7f000014a000/0x4000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) (async)
mmap$IORING_OFF_SQES(&(0x7f0000149000/0x1000)=nil, 0x1000, 0xc, 0x30, r6, 0x10000000) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r9}}, 0xffffffff) (async)
write$binfmt_script(r6, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
io_uring_enter(r6, 0x127e, 0x535a, 0x1, &(0x7f0000000380)={[0x7]}, 0x8) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000d00)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r6, 0x0, &(0x7f0000000cc0)={&(0x7f0000000880)=@tipc=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000900)="0d89d91b77b559d9839e9b594a1d1af77b4557a2dff1ef0e24caf9230911a502621e1f03629c782c4c61f722a5d05d0239296f6f03e4f03c33ca21268898cd5dcc29022bdbb30dff4bd92ef697b445ec858f04b766b5073f98bce46f208f3f7bf577e64da3a7f529901509ffb4b6a2a535e7915d07c2035779b7551842409188d739d67ab72ef7bff1cd8522d09d7c42916dc9b129f8fd7fd6b97ec73ee48968128eb989acd3a67097950d32", 0xac}], 0x1, &(0x7f0000000a00)=[{0xb0, 0x17, 0x4, "655b2e1ed2960bfa61f9865a343ae3b6441da920308957000a97eed3dec35d18565febd0766fa793e2c31d40129ed5e7e44f099068a50e20ba1f85b4bbd03fff0eec981dda04244001771ae91184d50ef4f7c7030cad64919883ccbece7586428e2f54492a9da01c337d81a1e763a88dc56f0797f07ae5a4ceba747dff15056673877e8638dfc216590471bf930e8f5e47aa1742b84434d75c02473fd6"}, {0xf0, 0x88, 0x6, "62aca5d50a6dbd85e56aa4b6ebc35dc278c18da6d3f95a28aad1b71c259056f662e266262692f64991de6a88abc48c33e20b4c22ffbb93104b2bf40683c978c1ba1bb444246e298ee66fb45f550badb4d0ef48dbb645123205bd492278ddd07fb224aae10f092974f89ec7115158692ea1c10780203a6abf5d227ed5a7b1f90d7dd0a095e4edddf5a13a0bec42ce4d6051d2479024365ad0bb5fec110bf3705b20910e6fb549693237e59f3845f7a6e1f1411e188eb73d82127c77ec967591a934054997eb047af8c6d2c01731ec0d2543e4a70b167fb1127d25a20b7f"}, {0x70, 0x288, 0x4, "fa9ea089f4da27bfd07b142166adeb86769ff8137f63874888c4ba4e5fd5eec52284c878cab72be4fb278c2874463296ac874cae2ac4a75d086db3867899322de47b199670d9fdd0baf8bdea7e7f0153d898b444fe680adbe79a"}, {0x80, 0x110, 0x0, "fbb5d83aa5db7f80a0d4d62cdbfff9524abbfdcfd89d8c098661ed928e8da3f0d7e602ef904786d0aaf78c53891e5d22d1665eb4c8c476eea1f4d0e86755c2fdc47ea256484ed0db43429e9626066e194906979213be0bdb02a042ebc8794dc99bf3c72f26981d20cd91b3"}], 0x290}, 0x0, 0x8040, 0x1}, 0xffff) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)

17:12:11 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x2f, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:11 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x7a, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:11 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xb8010000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:11 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x30, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:11 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xc4000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:11 executing program 1:
r0 = syz_io_uring_setup(0x3690, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8c}, &(0x7f0000148000/0x3000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:11 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x6c}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000002a80)={'ip6tnl0\x00', &(0x7f0000002a00)={'ip6tnl0\x00', 0x0, 0x2, 0x80, 0xff, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x700, 0x1, 0x9}})
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0x6c}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000042c0)={'syztnl0\x00', &(0x7f0000004240)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x0, 0x9, 0x20, @local, @empty, 0x1, 0x10, 0x787, 0x10001}})
sendmmsg$inet(r4, &(0x7f00000044c0), 0x0, 0x2000c004)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r11, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:12 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'lo\x00', 0x3}, 0x18) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x300, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:12 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x31, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:12 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xcd020000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:12 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x6c}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000002a80)={'ip6tnl0\x00', &(0x7f0000002a00)={'ip6tnl0\x00', 0x0, 0x2, 0x80, 0xff, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x700, 0x1, 0x9}})
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0x6c}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000042c0)={'syztnl0\x00', &(0x7f0000004240)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x0, 0x9, 0x20, @local, @empty, 0x1, 0x10, 0x787, 0x10001}})
sendmmsg$inet(r4, &(0x7f00000044c0), 0x0, 0x2000c004)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r11, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x6c}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000002a80)={'ip6tnl0\x00', &(0x7f0000002a00)={'ip6tnl0\x00', 0x0, 0x2, 0x80, 0xff, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x700, 0x1, 0x9}}) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0x6c}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000042c0)={'syztnl0\x00', &(0x7f0000004240)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x0, 0x9, 0x20, @local, @empty, 0x1, 0x10, 0x787, 0x10001}}) (async)
sendmmsg$inet(r4, &(0x7f00000044c0), 0x0, 0x2000c004) (async)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$binfmt_script(r11, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)

17:12:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x500, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:12 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x32, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:12 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd0000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x600, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:12 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd2030000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:12 executing program 1:
r0 = syz_io_uring_setup(0x3690, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8c}, &(0x7f0000148000/0x3000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x700, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:12 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x36, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:12 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd4000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:12 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'lo\x00', 0x3}, 0x18)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async, rerun: 64)
dup(0xffffffffffffffff) (async, rerun: 64)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:12 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x6c}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000002a80)={'ip6tnl0\x00', &(0x7f0000002a00)={'ip6tnl0\x00', 0x0, 0x2, 0x80, 0xff, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x700, 0x1, 0x9}})
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'vlan0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0x6c}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000042c0)={'syztnl0\x00', &(0x7f0000004240)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x0, 0x9, 0x20, @local, @empty, 0x1, 0x10, 0x787, 0x10001}})
sendmmsg$inet(r4, &(0x7f00000044c0), 0x0, 0x2000c004)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r11, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x6c}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000002a80)={'ip6tnl0\x00', &(0x7f0000002a00)={'ip6tnl0\x00', 0x0, 0x2, 0x80, 0xff, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x700, 0x1, 0x9}}) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x346}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x3c}, 0x1, 0x6c}, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000042c0)={'syztnl0\x00', &(0x7f0000004240)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x0, 0x9, 0x20, @local, @empty, 0x1, 0x10, 0x787, 0x10001}}) (async)
sendmmsg$inet(r4, &(0x7f00000044c0), 0x0, 0x2000c004) (async)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$binfmt_script(r11, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r11, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)

17:12:12 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x41, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:12 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd5020000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:12 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xe0000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:12 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x900, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:12 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x42, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1524.080075][T14676] validate_nla: 26 callbacks suppressed
[ 1524.080091][T14676] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
17:12:12 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xe1020000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1524.146478][T14712] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
17:12:14 executing program 1:
r0 = syz_io_uring_setup(0x3690, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8c}, &(0x7f0000148000/0x3000)=nil, &(0x7f000014a000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:14 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_setup(0x7847, &(0x7f0000008300)={0x0, 0x75fe, 0x4, 0x2, 0x278, 0x0, r0}, &(0x7f0000148000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000008380), &(0x7f00000083c0))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000081c0)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c00090000000500160001000000080010b0a80a9b40efd244b8171500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e84d589155d65c9cb60fcadcb7ef285168725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93762f7b2248ae0ebadc84c77f36c4eb5e529bd07bde02d46a77"], 0x9c}}, 0x20009000)
recvmmsg(r4, &(0x7f0000008000)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000440)=""/226, 0xe2}, {&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/51, 0x33}], 0x8, &(0x7f0000001740)=""/179, 0xb3}, 0x4}, {{&(0x7f0000001800)=@nfc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001880)=""/140, 0x8c}, {&(0x7f0000001940)=""/146, 0x92}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000001a00)=""/95, 0x5f}, {&(0x7f0000001a80)=""/95, 0x5f}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000001b00)=""/35, 0x23}], 0x7, &(0x7f0000001bc0)=""/75, 0x4b}, 0xfffff88c}, {{&(0x7f0000001c40)=@phonet, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001cc0)=""/61, 0x3d}, {&(0x7f0000001d00)=""/88, 0x58}, {&(0x7f0000001d80)=""/104, 0x68}, {&(0x7f0000001e00)=""/221, 0xdd}, {&(0x7f0000001f00)=""/11, 0xb}], 0x5, &(0x7f0000001fc0)=""/66, 0x42}, 0xffffffff}, {{&(0x7f0000002040)=@sco, 0x80, &(0x7f0000004580)=[{&(0x7f00000020c0)=""/239, 0xef}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/240, 0xf0}, {&(0x7f00000032c0)=""/92, 0x5c}, {&(0x7f0000003340)=""/82, 0x52}, {&(0x7f00000033c0)=""/193, 0xc1}, {&(0x7f00000034c0)=""/189, 0xbd}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x8, &(0x7f0000004600)=""/184, 0xb8}, 0x1f71}, {{&(0x7f00000046c0)=@can, 0x80, &(0x7f0000007c00)=[{&(0x7f0000004740)=""/40, 0x28}, {&(0x7f0000004780)=""/130, 0x82}, {&(0x7f0000004840)=""/4096, 0x1000}, {&(0x7f0000005840)=""/229, 0xe5}, {&(0x7f0000005940)=""/139, 0x8b}, {&(0x7f0000005a00)=""/207, 0xcf}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/4096, 0x1000}, {&(0x7f0000007b00)=""/206, 0xce}], 0x9, &(0x7f0000007cc0)}, 0xffffffff}, {{&(0x7f0000007d00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000007d80)=""/86, 0x56}, {&(0x7f0000007e00)=""/70, 0x46}, {&(0x7f0000007e80)=""/217, 0xd9}], 0x3, &(0x7f0000007fc0)=""/60, 0x3c}, 0x7}], 0x6, 0x100, &(0x7f0000008180))
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f0000007cc0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x40010000, 0x1, {0x3}}, 0x9)

17:12:14 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x60, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:14 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xea030000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:14 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xa00, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:14 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r4 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:14 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x12, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:14 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x1d, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1525.339900][T14722] __nla_validate_parse: 1 callbacks suppressed
[ 1525.339916][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1525.355419][T14722] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1525.371472][T14724] xt_check_match: 27 callbacks suppressed
[ 1525.371495][T14724] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:14 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_setup(0x7847, &(0x7f0000008300)={0x0, 0x75fe, 0x4, 0x2, 0x278, 0x0, r0}, &(0x7f0000148000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000008380), &(0x7f00000083c0))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000081c0)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c00090000000500160001000000080010b0a80a9b40efd244b8171500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e84d589155d65c9cb60fcadcb7ef285168725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93762f7b2248ae0ebadc84c77f36c4eb5e529bd07bde02d46a77"], 0x9c}}, 0x20009000) (async)
recvmmsg(r4, &(0x7f0000008000)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000440)=""/226, 0xe2}, {&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/51, 0x33}], 0x8, &(0x7f0000001740)=""/179, 0xb3}, 0x4}, {{&(0x7f0000001800)=@nfc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001880)=""/140, 0x8c}, {&(0x7f0000001940)=""/146, 0x92}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000001a00)=""/95, 0x5f}, {&(0x7f0000001a80)=""/95, 0x5f}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000001b00)=""/35, 0x23}], 0x7, &(0x7f0000001bc0)=""/75, 0x4b}, 0xfffff88c}, {{&(0x7f0000001c40)=@phonet, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001cc0)=""/61, 0x3d}, {&(0x7f0000001d00)=""/88, 0x58}, {&(0x7f0000001d80)=""/104, 0x68}, {&(0x7f0000001e00)=""/221, 0xdd}, {&(0x7f0000001f00)=""/11, 0xb}], 0x5, &(0x7f0000001fc0)=""/66, 0x42}, 0xffffffff}, {{&(0x7f0000002040)=@sco, 0x80, &(0x7f0000004580)=[{&(0x7f00000020c0)=""/239, 0xef}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/240, 0xf0}, {&(0x7f00000032c0)=""/92, 0x5c}, {&(0x7f0000003340)=""/82, 0x52}, {&(0x7f00000033c0)=""/193, 0xc1}, {&(0x7f00000034c0)=""/189, 0xbd}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x8, &(0x7f0000004600)=""/184, 0xb8}, 0x1f71}, {{&(0x7f00000046c0)=@can, 0x80, &(0x7f0000007c00)=[{&(0x7f0000004740)=""/40, 0x28}, {&(0x7f0000004780)=""/130, 0x82}, {&(0x7f0000004840)=""/4096, 0x1000}, {&(0x7f0000005840)=""/229, 0xe5}, {&(0x7f0000005940)=""/139, 0x8b}, {&(0x7f0000005a00)=""/207, 0xcf}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/4096, 0x1000}, {&(0x7f0000007b00)=""/206, 0xce}], 0x9, &(0x7f0000007cc0)}, 0xffffffff}, {{&(0x7f0000007d00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000007d80)=""/86, 0x56}, {&(0x7f0000007e00)=""/70, 0x46}, {&(0x7f0000007e80)=""/217, 0xd9}], 0x3, &(0x7f0000007fc0)=""/60, 0x3c}, 0x7}], 0x6, 0x100, &(0x7f0000008180))
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f0000007cc0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x40010000, 0x1, {0x3}}, 0x9)

17:12:14 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xb00, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:14 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x33c, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1525.398932][T14725] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
17:12:14 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xf2030000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1525.450343][T14738] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1525.483167][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1525.492453][T14740] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1525.505040][T14745] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:15 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x387000, 0x5c)
mmap$IORING_OFF_SQ_RING(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x0, 0x110, r3, 0x0)
r4 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x643, &(0x7f0000000100)={0x0, 0x3d02, 0x0, 0x0, 0x30a}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x2000)=nil, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000280))
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={<r9=>0x0, <r10=>0x0})
syz_io_uring_submit(r5, r7, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)={r9, r10+60000000}}, 0x8)

17:12:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xc00, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:15 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_setup(0x7847, &(0x7f0000008300)={0x0, 0x75fe, 0x4, 0x2, 0x278, 0x0, r0}, &(0x7f0000148000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000008380), &(0x7f00000083c0)) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000081c0)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c00090000000500160001000000080010b0a80a9b40efd244b8171500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e84d589155d65c9cb60fcadcb7ef285168725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93762f7b2248ae0ebadc84c77f36c4eb5e529bd07bde02d46a77"], 0x9c}}, 0x20009000) (async)
recvmmsg(r4, &(0x7f0000008000)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000380)=""/138, 0x8a}, {&(0x7f0000000440)=""/226, 0xe2}, {&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000040)=""/19, 0x13}, {&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/51, 0x33}], 0x8, &(0x7f0000001740)=""/179, 0xb3}, 0x4}, {{&(0x7f0000001800)=@nfc, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001880)=""/140, 0x8c}, {&(0x7f0000001940)=""/146, 0x92}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000001a00)=""/95, 0x5f}, {&(0x7f0000001a80)=""/95, 0x5f}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f0000001b00)=""/35, 0x23}], 0x7, &(0x7f0000001bc0)=""/75, 0x4b}, 0xfffff88c}, {{&(0x7f0000001c40)=@phonet, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001cc0)=""/61, 0x3d}, {&(0x7f0000001d00)=""/88, 0x58}, {&(0x7f0000001d80)=""/104, 0x68}, {&(0x7f0000001e00)=""/221, 0xdd}, {&(0x7f0000001f00)=""/11, 0xb}], 0x5, &(0x7f0000001fc0)=""/66, 0x42}, 0xffffffff}, {{&(0x7f0000002040)=@sco, 0x80, &(0x7f0000004580)=[{&(0x7f00000020c0)=""/239, 0xef}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/240, 0xf0}, {&(0x7f00000032c0)=""/92, 0x5c}, {&(0x7f0000003340)=""/82, 0x52}, {&(0x7f00000033c0)=""/193, 0xc1}, {&(0x7f00000034c0)=""/189, 0xbd}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x8, &(0x7f0000004600)=""/184, 0xb8}, 0x1f71}, {{&(0x7f00000046c0)=@can, 0x80, &(0x7f0000007c00)=[{&(0x7f0000004740)=""/40, 0x28}, {&(0x7f0000004780)=""/130, 0x82}, {&(0x7f0000004840)=""/4096, 0x1000}, {&(0x7f0000005840)=""/229, 0xe5}, {&(0x7f0000005940)=""/139, 0x8b}, {&(0x7f0000005a00)=""/207, 0xcf}, {&(0x7f0000005b00)=""/4096, 0x1000}, {&(0x7f0000006b00)=""/4096, 0x1000}, {&(0x7f0000007b00)=""/206, 0xce}], 0x9, &(0x7f0000007cc0)}, 0xffffffff}, {{&(0x7f0000007d00)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000007d80)=""/86, 0x56}, {&(0x7f0000007e00)=""/70, 0x46}, {&(0x7f0000007e80)=""/217, 0xd9}], 0x3, &(0x7f0000007fc0)=""/60, 0x3c}, 0x7}], 0x6, 0x100, &(0x7f0000008180))
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async, rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (rerun: 32)
write$binfmt_script(r5, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x8000000)
syz_io_uring_submit(r6, r2, &(0x7f0000007cc0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x3, 0x0, r4, 0x0, 0x0, 0x0, 0x40010000, 0x1, {0x3}}, 0x9)

17:12:15 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x408, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:15 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xf4030000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:15 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r4 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
pipe(&(0x7f0000000100)) (async)
syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)

[ 1526.461369][T14754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1526.470722][T14754] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1526.480937][T14756] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1526.494337][T14760] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:15 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001500)=[@cred={{0x1c}}], 0x20}, 0x12)
sendmsg$802154_raw(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x24, @short={0x2, 0x1}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="1eeee0fd9c5a4026350c449f3a724cc56e5bc6223a440d7289b94ae199f3ebdd77d46dcc93b7779d43c856c4851b73bde45925234bca57dd45146d93a4fcb5dc", 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x20008080)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:15 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x2, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xd00, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:15 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xf6030000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1526.512584][T14757] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
17:12:15 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001500)=[@cred={{0x1c}}], 0x20}, 0x12) (async)
sendmsg$802154_raw(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x24, @short={0x2, 0x1}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="1eeee0fd9c5a4026350c449f3a724cc56e5bc6223a440d7289b94ae199f3ebdd77d46dcc93b7779d43c856c4851b73bde45925234bca57dd45146d93a4fcb5dc", 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x20008080)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:15 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x6, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1526.561372][T14782] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1526.575769][T14784] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1526.648202][T14761] net_ratelimit: 17095 callbacks suppressed
[ 1526.648219][T14761] dccp_time_wait: time wait bucket table overflow
[ 1526.661352][T14791] dccp_time_wait: time wait bucket table overflow
[ 1526.664853][T14758] dccp_time_wait: time wait bucket table overflow
[ 1526.668075][T14791] dccp_time_wait: time wait bucket table overflow
[ 1526.676774][T14758] dccp_time_wait: time wait bucket table overflow
[ 1526.682787][T14761] dccp_time_wait: time wait bucket table overflow
17:12:15 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x387000, 0x5c)
mmap$IORING_OFF_SQ_RING(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x0, 0x110, r3, 0x0) (async)
r4 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_setup(0x643, &(0x7f0000000100)={0x0, 0x3d02, 0x0, 0x0, 0x30a}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x2000)=nil, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000280)) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000380)={<r9=>0x0, <r10=>0x0})
syz_io_uring_submit(r5, r7, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)={r9, r10+60000000}}, 0x8)

17:12:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xe00, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:15 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x1d, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:15 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r5=>r0}, './file0\x00'})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/249, 0xf9}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001500)=[@cred={{0x1c}}], 0x20}, 0x12) (async)
sendmsg$802154_raw(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x24, @short={0x2, 0x1}}, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)="1eeee0fd9c5a4026350c449f3a724cc56e5bc6223a440d7289b94ae199f3ebdd77d46dcc93b7779d43c856c4851b73bde45925234bca57dd45146d93a4fcb5dc", 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x20008080)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:15 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xfc030000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1526.689215][T14758] dccp_time_wait: time wait bucket table overflow
[ 1526.694259][T14791] dccp_time_wait: time wait bucket table overflow
[ 1526.703220][T14758] dccp_time_wait: time wait bucket table overflow
[ 1526.706857][T14791] dccp_time_wait: time wait bucket table overflow
[ 1526.760237][T14795] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1526.771278][T14800] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:15 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x184, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r4 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async, rerun: 32)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 32)

17:12:15 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x403, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xf00, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:15 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xfd030000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:15 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x100010, r0, 0x8000000)
syz_io_uring_setup(0x47a8, &(0x7f0000000000)={0x0, 0xea8d, 0x2, 0x2, 0x7e, 0x0, r0}, &(0x7f000014a000/0x1000)=nil, &(0x7f00005f0000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=<r5=>0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x9, 0x80000)
r7 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
r11 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000)
syz_io_uring_submit(r8, r11, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x1)
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2007, @fd=r6, 0x8, &(0x7f0000000480)=[{&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000440)=""/34, 0x22}], 0x2, 0x11, 0x2, {0x0, r10}}, 0x80000000)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r12, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r12, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:15 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x387000, 0x5c)
mmap$IORING_OFF_SQ_RING(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x0, 0x110, r3, 0x0)
r4 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x643, &(0x7f0000000100)={0x0, 0x3d02, 0x0, 0x0, 0x30a}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x2000)=nil, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000280))
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={<r9=>0x0, <r10=>0x0})
syz_io_uring_submit(r5, r7, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)={r9, r10+60000000}}, 0x8)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x387000, 0x5c) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x0, 0x110, r3, 0x0) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_setup(0x643, &(0x7f0000000100)={0x0, 0x3d02, 0x0, 0x0, 0x30a}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000280)) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000380)) (async)
syz_io_uring_submit(r5, r7, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)={r9, r10+60000000}}, 0x8) (async)

17:12:15 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x407, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:15 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xfe030000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x1100, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:15 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async, rerun: 64)
r3 = socket$inet(0x2, 0x6, 0x0) (rerun: 64)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async, rerun: 64)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async, rerun: 64)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x100010, r0, 0x8000000) (async)
syz_io_uring_setup(0x47a8, &(0x7f0000000000)={0x0, 0xea8d, 0x2, 0x2, 0x7e, 0x0, r0}, &(0x7f000014a000/0x1000)=nil, &(0x7f00005f0000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=<r5=>0x0) (async, rerun: 64)
r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x9, 0x80000) (async, rerun: 64)
r7 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) (async, rerun: 64)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async, rerun: 64)
r11 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000)
syz_io_uring_submit(r8, r11, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x1)
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2007, @fd=r6, 0x8, &(0x7f0000000480)=[{&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000440)=""/34, 0x22}], 0x2, 0x11, 0x2, {0x0, r10}}, 0x80000000) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r12, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r12, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

[ 1527.046956][T14816] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1527.059978][T14813] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
17:12:15 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x7fffffe, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:15 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x1200, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1527.115245][T14831] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1527.125705][T14830] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1527.182083][T14858] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
17:12:16 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xff000000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:16 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x100010, r0, 0x8000000) (async)
syz_io_uring_setup(0x47a8, &(0x7f0000000000)={0x0, 0xea8d, 0x2, 0x2, 0x7e, 0x0, r0}, &(0x7f000014a000/0x1000)=nil, &(0x7f00005f0000/0x4000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)=<r5=>0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000000280), 0x9, 0x80000)
r7 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) (async)
r11 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000)
syz_io_uring_submit(r8, r11, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r10}}, 0x1) (async)
syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x2007, @fd=r6, 0x8, &(0x7f0000000480)=[{&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000440)=""/34, 0x22}], 0x2, 0x11, 0x2, {0x0, r10}}, 0x80000000) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r12, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r12, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:16 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x188, &(0x7f0000000100)={0x0, 0xe8c4, 0x8, 0xfffffff9, 0x8000001}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r2 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x2000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:16 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c0009000000050016000100000008001500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e848725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93722f7b2248ae0ebadc84c77f36c4eb5e529bd07bde92fc55bf1be6ffefee8f9e"], 0x9c}}, 0x20009000)
bind(r4, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80)

17:12:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x2500, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x43da, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1527.838759][T14864] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:16 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x4788, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:16 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x188, &(0x7f0000000100)={0x0, 0xe8c4, 0x8, 0xfffffff9, 0x8000001}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r2 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

[ 1527.951622][T14883] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:16 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x8000000, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x4800, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:16 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x188, &(0x7f0000000100)={0x0, 0xe8c4, 0x8, 0xfffffff9, 0x8000001}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r2 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x188, &(0x7f0000000100)={0x0, 0xe8c4, 0x8, 0xfffffff9, 0x8000001}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)

17:12:16 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x2, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:16 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x3, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x4888, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:16 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c0009000000050016000100000008001500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e848725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93722f7b2248ae0ebadc84c77f36c4eb5e529bd07bde92fc55bf1be6ffefee8f9e"], 0x9c}}, 0x20009000)
bind(r4, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80)

17:12:16 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ed000/0x3000)=nil, 0x3000, 0x3000000, 0x4a016, r0, 0x8000000)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r7 = syz_io_uring_setup(0x71b2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x2a0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
getsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000280), &(0x7f0000000380)=0x4)
r10 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000)
syz_io_uring_submit(r8, r10, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1)
syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0xfffffff8)
r11 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r11, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000200)=@in}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r12, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r12, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x4c00, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:16 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
io_uring_enter(r0, 0x484e, 0x42dd, 0x0, &(0x7f0000000100)={[0x1]}, 0x8)
syz_io_uring_setup(0x62cf, &(0x7f0000000380)={0x0, 0xe96a, 0x2, 0x0, 0x8a}, &(0x7f0000000000/0x800000)=nil, &(0x7f00004f0000/0x3000)=nil, &(0x7f0000000140), &(0x7f00000001c0))
r3 = socket$inet(0x2, 0x6, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0))
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:16 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x4, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x5865, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:17 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0xd0, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:17 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x5, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:17 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ed000/0x3000)=nil, 0x3000, 0x3000000, 0x4a016, r0, 0x8000000) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0) (async)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r7 = syz_io_uring_setup(0x71b2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x2a0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
getsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000280), &(0x7f0000000380)=0x4) (async)
r10 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000)
syz_io_uring_submit(r8, r10, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) (async)
syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0xfffffff8) (async)
r11 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r11, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r12, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r12, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x6000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:17 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c0009000000050016000100000008001500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e848725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93722f7b2248ae0ebadc84c77f36c4eb5e529bd07bde92fc55bf1be6ffefee8f9e"], 0x9c}}, 0x20009000)
bind(r4, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c0000001000010427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000740012800e00010069703665727370616e00000060000280080015100526080006000f00020000000400120008000c0009000000050016000100000008001500e8bd09001400060020010000000000000000000000000002140006000000000000000000000000000000000105000800a9000000080003001e848725d92ab8392c06a1e274c23fe5c9f65c3ac822765a0e0ac0a79f0bf1cca7b6a8d7438661a7a7d1a42dc87301e1f42f2222d5450a74f87cb58c9e245f7b37da3e93722f7b2248ae0ebadc84c77f36c4eb5e529bd07bde92fc55bf1be6ffefee8f9e"], 0x9c}}, 0x20009000) (async)
bind(r4, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80) (async)

17:12:17 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f00005ed000/0x3000)=nil, 0x3000, 0x3000000, 0x4a016, r0, 0x8000000) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0) (async, rerun: 64)
r6 = socket$inet_tcp(0x2, 0x3, 0x6) (rerun: 64)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r7 = syz_io_uring_setup(0x71b2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x2a0}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) (async)
getsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000280), &(0x7f0000000380)=0x4) (async)
r10 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r7, 0x10000000)
syz_io_uring_submit(r8, r10, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x1) (async, rerun: 32)
syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r0}, 0xfffffff8) (async, rerun: 32)
r11 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r11, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000200)=@in}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r12, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r12, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)

17:12:17 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x6, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x6558, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:17 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x1b8, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:17 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
io_uring_enter(r0, 0x484e, 0x42dd, 0x0, &(0x7f0000000100)={[0x1]}, 0x8) (async)
syz_io_uring_setup(0x62cf, &(0x7f0000000380)={0x0, 0xe96a, 0x2, 0x0, 0x8a}, &(0x7f0000000000/0x800000)=nil, &(0x7f00004f0000/0x3000)=nil, &(0x7f0000000140), &(0x7f00000001c0)) (async, rerun: 64)
r3 = socket$inet(0x2, 0x6, 0x0) (async, rerun: 64)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0)) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:17 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:17 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x7, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x6800, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:17 executing program 5:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x6, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x6c00, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:17 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x8, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:17 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0xc5e0, 0x1, 0x2}, &(0x7f00005f1000/0x4000)=nil, &(0x7f00005f0000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:17 executing program 5:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x2, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:17 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x33c, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:17 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x9, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x7400, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:17 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
io_uring_enter(r0, 0x484e, 0x42dd, 0x0, &(0x7f0000000100)={[0x1]}, 0x8) (async)
syz_io_uring_setup(0x62cf, &(0x7f0000000380)={0x0, 0xe96a, 0x2, 0x0, 0x8a}, &(0x7f0000000000/0x800000)=nil, &(0x7f00004f0000/0x3000)=nil, &(0x7f0000000140), &(0x7f00000001c0)) (async)
r3 = socket$inet(0x2, 0x6, 0x0) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0)) (async)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) (async)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:17 executing program 5:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
r4 = mmap$IORING_OFF_SQES(&(0x7f00005f0000/0x4000)=nil, 0x4000, 0x0, 0x33, r0, 0x10000000)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x1, {0x0, r5}}, 0x3)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:17 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xa, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:17 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:17 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x7a00, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:17 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0xc5e0, 0x1, 0x2}, &(0x7f00005f1000/0x4000)=nil, &(0x7f00005f0000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

[ 1529.114433][T14987] validate_nla: 12 callbacks suppressed
[ 1529.114490][T14987] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
17:12:17 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xb, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:17 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x1fffffbf, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:17 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0xc5e0, 0x1, 0x2}, &(0x7f00005f1000/0x4000)=nil, &(0x7f00005f0000/0x2000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0xc5e0, 0x1, 0x2}, &(0x7f00005f1000/0x4000)=nil, &(0x7f00005f0000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:17 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xc, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x8100, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1529.179803][T15001] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
17:12:18 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xd, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:18 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r2 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0xe4d0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

[ 1529.265062][T15023] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
17:12:18 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (fail_nth: 1)

17:12:18 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r2 = socket$inet(0x2, 0x6, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r6 = epoll_create1(0x0)
r7 = socket$l2tp(0x2, 0x2, 0x73)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f00000000c0))
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x33, &(0x7f0000000100)=[r0, r6, r7, r2, r0, r0, r8, r9], 0x8, 0x0, 0x1}, 0x1)

17:12:18 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xe, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:18 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x8847, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:18 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r2 = socket$inet(0x2, 0x6, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async, rerun: 32)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async, rerun: 32)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0) (async)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r6 = epoll_create1(0x0) (async)
r7 = socket$l2tp(0x2, 0x2, 0x73)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xe) (async, rerun: 64)
ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f00000000c0)) (async, rerun: 64)
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x33, &(0x7f0000000100)=[r0, r6, r7, r2, r0, r0, r8, r9], 0x8, 0x0, 0x1}, 0x1)

17:12:18 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x10, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1529.329384][T15031] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1529.353161][T15036] FAULT_INJECTION: forcing a failure.
[ 1529.353161][T15036] name failslab, interval 1, probability 0, space 0, times 0
[ 1529.365922][T15036] CPU: 1 PID: 15036 Comm: syz-executor.5 Not tainted 5.18.0-rc3-syzkaller-00235-g22da5264abf4-dirty #0
[ 1529.377239][T15036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1529.387298][T15036] Call Trace:
[ 1529.390575][T15036]  <TASK>
[ 1529.393509][T15036]  dump_stack_lvl+0xd6/0x122
[ 1529.398109][T15036]  dump_stack+0x11/0x12
[ 1529.402266][T15036]  should_fail+0x230/0x240
[ 1529.406689][T15036]  __should_failslab+0x81/0x90
[ 1529.411493][T15036]  should_failslab+0x5/0x20
[ 1529.416002][T15036]  kmem_cache_alloc_bulk+0x3e/0x350
[ 1529.421302][T15036]  ? kstrtoull+0x10c/0x140
[ 1529.425748][T15036]  __io_alloc_req_refill+0x1a6/0x2cb
[ 1529.431066][T15036]  ? _raw_spin_unlock_irqrestore+0x3c/0x60
[ 1529.436884][T15036]  io_submit_sqes+0x2d7/0x7e0
[ 1529.441573][T15036]  __se_sys_io_uring_enter+0x2cb/0xc70
[ 1529.447112][T15036]  __x64_sys_io_uring_enter+0x74/0x80
[ 1529.452553][T15036]  do_syscall_64+0x2b/0x70
[ 1529.456979][T15036]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1529.462888][T15036] RIP: 0033:0x7f7c933790e9
[ 1529.467316][T15036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1529.486969][T15036] RSP: 002b:00007f7c92aef168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1529.495388][T15036] RAX: ffffffffffffffda RBX: 00007f7c9348bf60 RCX: 00007f7c933790e9
[ 1529.503423][T15036] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003
[ 1529.511396][T15036] RBP: 00007f7c92aef1d0 R08: 0000000000000000 R09: 0300000000000000
[ 1529.519372][T15036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1529.527346][T15036] R13: 00007fff688b98ef R14: 00007f7c92aef300 R15: 0000000000022000
[ 1529.535385][T15036]  </TASK>
[ 1529.980507][T15006] syz-executor.0 invoked oom-killer: gfp_mask=0x402cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN), order=0, oom_score_adj=1000
[ 1529.994100][T15006] CPU: 0 PID: 15006 Comm: syz-executor.0 Not tainted 5.18.0-rc3-syzkaller-00235-g22da5264abf4-dirty #0
[ 1530.005181][T15006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1530.015223][T15006] Call Trace:
[ 1530.018522][T15006]  <TASK>
[ 1530.021432][T15006]  dump_stack_lvl+0xd6/0x122
[ 1530.026018][T15006]  dump_stack+0x11/0x12
[ 1530.030666][T15006]  dump_header+0x98/0x410
[ 1530.034987][T15006]  oom_kill_process+0xfe/0x550
[ 1530.039955][T15006]  out_of_memory+0x620/0x880
[ 1530.044550][T15006]  mem_cgroup_oom+0x475/0x4f0
[ 1530.049233][T15006]  try_charge_memcg+0x746/0x960
[ 1530.054222][T15006]  __memcg_kmem_charge_page+0x2e4/0x480
[ 1530.059777][T15006]  __alloc_pages+0x1a5/0x320
[ 1530.064364][T15006]  alloc_pages+0x34d/0x450
[ 1530.068802][T15006]  __vmalloc_node_range+0x730/0xef0
[ 1530.074097][T15006]  ? __this_cpu_preempt_check+0xf/0x10
[ 1530.079547][T15006]  ? sysvec_apic_timer_interrupt+0x4a/0xb0
[ 1530.085474][T15006]  ? xt_alloc_table_info+0x39/0x70
[ 1530.090582][T15006]  __vmalloc_node+0x61/0x70
[ 1530.095090][T15006]  ? xt_alloc_table_info+0x39/0x70
[ 1530.100221][T15006]  kvmalloc_node+0xbe/0x100
[ 1530.104732][T15006]  xt_alloc_table_info+0x39/0x70
[ 1530.109670][T15006]  do_ipt_set_ctl+0x63c/0x16e0
[ 1530.114499][T15006]  ? _raw_spin_unlock+0x2d/0x50
[ 1530.119338][T15006]  ? finish_task_switch+0xf0/0x240
[ 1530.125177][T15006]  ? __schedule+0x514/0x6c0
[ 1530.129712][T15006]  ? schedule+0x7b/0xa0
[ 1530.133939][T15006]  ? futex_wait_queue+0x11c/0x160
[ 1530.138951][T15006]  ? __rcu_read_unlock+0x4a/0x70
[ 1530.143887][T15006]  nf_setsockopt+0x1a6/0x1c0
[ 1530.148525][T15006]  ip_setsockopt+0x1741/0x1ea0
[ 1530.153371][T15006]  ? selinux_socket_setsockopt+0x145/0x170
[ 1530.159181][T15006]  raw_setsockopt+0x100/0x150
[ 1530.164126][T15006]  sock_common_setsockopt+0x5d/0x70
[ 1530.169330][T15006]  ? sock_common_recvmsg+0xe0/0xe0
[ 1530.174444][T15006]  __sys_setsockopt+0x212/0x2b0
[ 1530.179287][T15006]  __x64_sys_setsockopt+0x62/0x70
[ 1530.184304][T15006]  do_syscall_64+0x2b/0x70
[ 1530.188773][T15006]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1530.194656][T15006] RIP: 0033:0x7faedb44e0e9
[ 1530.199058][T15006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1530.218662][T15006] RSP: 002b:00007faedabc4168 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1530.227139][T15006] RAX: ffffffffffffffda RBX: 00007faedb560f60 RCX: 00007faedb44e0e9
[ 1530.235096][T15006] RDX: 0000000000000040 RSI: 8001000000000000 RDI: 0000000000000004
[ 1530.243062][T15006] RBP: 00007faedb4a808d R08: 00000000000002e7 R09: 0000000000000000
[ 1530.251020][T15006] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000000
[ 1530.258978][T15006] R13: 00007ffc03b2f1cf R14: 00007faedabc4300 R15: 0000000000022000
[ 1530.266943][T15006]  </TASK>
[ 1530.270097][T15006] memory: usage 307068kB, limit 307200kB, failcnt 53
[ 1530.276790][T15006] swap: usage 0kB, limit 9007199254740988kB, failcnt 0
[ 1530.283638][T15006] Memory cgroup stats for /syz0:
[ 1530.283946][T15006] anon 151552
[ 1530.283946][T15006] file 94208
[ 1530.283946][T15006] kernel 314085376
[ 1530.283946][T15006] kernel_stack 16384
[ 1530.283946][T15006] pagetables 77824
[ 1530.283946][T15006] percpu 0
[ 1530.283946][T15006] sock 0
[ 1530.283946][T15006] vmalloc 0
[ 1530.283946][T15006] shmem 65536
[ 1530.283946][T15006] file_mapped 57344
[ 1530.283946][T15006] file_dirty 12288
[ 1530.283946][T15006] file_writeback 0
[ 1530.283946][T15006] swapcached 0
[ 1530.283946][T15006] inactive_anon 167936
[ 1530.283946][T15006] active_anon 49152
[ 1530.283946][T15006] inactive_file 12288
[ 1530.283946][T15006] active_file 16384
[ 1530.283946][T15006] unevictable 0
[ 1530.283946][T15006] slab_reclaimable 11856
[ 1530.283946][T15006] slab_unreclaimable 958384
[ 1530.283946][T15006] slab 970240
[ 1530.283946][T15006] workingset_refault_anon 0
[ 1530.283946][T15006] workingset_refault_file 9
[ 1530.283946][T15006] workingset_activate_anon 0
[ 1530.283946][T15006] workingset_activate_file 0
[ 1530.379243][T15006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=15004,uid=0
[ 1530.394685][T15006] Memory cgroup out of memory: Killed process 15006 (syz-executor.0) total-vm:46440kB, anon-rss:440kB, file-rss:8932kB, shmem-rss:68kB, UID:0 pgtables:80kB oom_score_adj:1000
17:12:19 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:19 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x8848, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:19 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r2 = socket$inet(0x2, 0x6, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r6 = epoll_create1(0x0)
r7 = socket$l2tp(0x2, 0x2, 0x73)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f00000000c0))
r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x33, &(0x7f0000000100)=[r0, r6, r7, r2, r0, r0, r8, r9], 0x8, 0x0, 0x1}, 0x1)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
epoll_create1(0x0) (async)
socket$l2tp(0x2, 0x2, 0x73) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r8, 0x541a, &(0x7f00000000c0)) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async)
syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x33, &(0x7f0000000100)=[r0, r6, r7, r2, r0, r0, r8, r9], 0x8, 0x0, 0x1}, 0x1) (async)

17:12:19 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r2 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0xe4d0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0xe4d0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)

17:12:19 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x11, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:19 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (fail_nth: 2)

[ 1530.555553][T15071] FAULT_INJECTION: forcing a failure.
[ 1530.555553][T15071] name failslab, interval 1, probability 0, space 0, times 0
[ 1530.558284][T15072] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1530.568417][T15071] CPU: 0 PID: 15071 Comm: syz-executor.5 Not tainted 5.18.0-rc3-syzkaller-00235-g22da5264abf4-dirty #0
[ 1530.587474][T15071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1530.592096][T15074] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1530.597524][T15071] Call Trace:
[ 1530.597593][T15071]  <TASK>
[ 1530.597600][T15071]  dump_stack_lvl+0xd6/0x122
[ 1530.597632][T15071]  dump_stack+0x11/0x12
[ 1530.597656][T15071]  should_fail+0x230/0x240
[ 1530.627517][T15071]  __should_failslab+0x81/0x90
[ 1530.632296][T15071]  ? io_arm_poll_handler+0x24d/0x5a0
[ 1530.637590][T15071]  should_failslab+0x5/0x20
[ 1530.642159][T15071]  kmem_cache_alloc_trace+0x4d/0x320
[ 1530.647583][T15071]  io_arm_poll_handler+0x24d/0x5a0
17:12:19 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x2, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:19 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xda43, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:19 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x12, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:19 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r1, r8, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0xffffffff)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x0, 0x7f, 0x4, 0x2c3, 0x8, 0x269, 0x1}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb1b)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000100)=0xffffffff, 0x0, 0x4)
io_uring_enter(r0, 0x3f39, 0x1e5f, 0x3, &(0x7f0000000000)={[0x20b]}, 0x8)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

[ 1530.652776][T15071]  io_queue_sqe_arm_apoll+0x50/0x1f0
[ 1530.658068][T15071]  ? io_submit_sqe+0x37ef/0x4250
[ 1530.663087][T15071]  io_submit_sqe+0x37f7/0x4250
[ 1530.666265][T15096] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1530.667854][T15071]  io_submit_sqes+0x25e/0x7e0
[ 1530.667882][T15071]  __se_sys_io_uring_enter+0x2cb/0xc70
[ 1530.686276][T15071]  __x64_sys_io_uring_enter+0x74/0x80
[ 1530.692242][T15071]  do_syscall_64+0x2b/0x70
[ 1530.696675][T15071]  entry_SYSCALL_64_after_hwframe+0x44/0xae
17:12:19 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x34000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1530.702581][T15071] RIP: 0033:0x7f7c933790e9
[ 1530.707009][T15071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 1530.725571][T15103] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1530.726764][T15071] RSP: 002b:00007f7c92aef168 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1530.726790][T15071] RAX: ffffffffffffffda RBX: 00007f7c9348bf60 RCX: 00007f7c933790e9
17:12:19 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x400300, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:19 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x25, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1530.751286][T15071] RDX: 0000000000000000 RSI: 00000000000045f5 RDI: 0000000000000003
[ 1530.759260][T15071] RBP: 00007f7c92aef1d0 R08: 0000000000000000 R09: 0300000000000000
[ 1530.767236][T15071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1530.775419][T15071] R13: 00007fff688b98ef R14: 00007f7c92aef300 R15: 0000000000022000
[ 1530.777360][T15107] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
[ 1530.783402][T15071]  </TASK>
17:12:19 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r2 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0xe4d0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0xe4d0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)

17:12:19 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r1, r8, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0xffffffff)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x0, 0x7f, 0x4, 0x2c3, 0x8, 0x269, 0x1}, "2472932d8f801958ac796a2c521559764cb7dac570d7be22f3a207db9a5b89570095ffcf409a1ac11c0f99b37a246ebbaabcac6582f5e02d4d413bff821ee5ca7c78e5d42e8b058bbafe873e7f4304bac893fda1217500163da5cc26c0bd79c1feccf4964566dcc1a32686e1d3c7b6e10d9e3a68c0432464b1e519a5188259f648dd36a1063bd39c3a94d50f9335d180cd2f8ba96bf030a36dc0ed8e665ca91305b1ceadcb7b87ee87842e7050591ab2d6b5e85351ccb8f3a70701afef28e1ad786f988ad3a807d6f66c7a6132fd402f077a9392d2c68e73485e3bb420d680fbf3b62672ddd2232d259cfab0c41eef28d2a4d738edf1e3cba727ca", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb1b)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000100)=0xffffffff, 0x0, 0x4)
io_uring_enter(r0, 0x3f39, 0x1e5f, 0x3, &(0x7f0000000000)={[0x20b]}, 0x8)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r1, r8, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0xffffffff) (async)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x0, 0x7f, 0x4, 0x2c3, 0x8, 0x269, 0x1}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb1b) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000100)=0xffffffff, 0x0, 0x4) (async)
io_uring_enter(r0, 0x3f39, 0x1e5f, 0x3, &(0x7f0000000000)={[0x20b]}, 0x8) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:19 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x29, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:19 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (fail_nth: 3)

[ 1530.816843][T15109] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1530.853640][T15118] FAULT_INJECTION: forcing a failure.
[ 1530.853640][T15118] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1530.866771][T15118] CPU: 0 PID: 15118 Comm: syz-executor.5 Not tainted 5.18.0-rc3-syzkaller-00235-g22da5264abf4-dirty #0
[ 1530.877797][T15118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1530.888014][T15118] Call Trace:
[ 1530.891289][T15118]  <TASK>
[ 1530.894232][T15118]  dump_stack_lvl+0xd6/0x122
[ 1530.898833][T15118]  dump_stack+0x11/0x12
[ 1530.905694][T15118]  should_fail+0x230/0x240
[ 1530.910119][T15118]  should_fail_usercopy+0x16/0x20
17:12:19 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x3, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1530.915157][T15118]  _copy_to_user+0x1a/0x90
[ 1530.919605][T15118]  simple_read_from_buffer+0xab/0x120
[ 1530.925036][T15118]  proc_fail_nth_read+0x10d/0x150
[ 1530.930078][T15118]  ? proc_fault_inject_write+0x230/0x230
[ 1530.935732][T15118]  vfs_read+0x1a1/0x6a0
[ 1530.939901][T15118]  ? __fget_files+0x1d2/0x210
[ 1530.940910][T15124] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1530.944590][T15118]  ksys_read+0xe8/0x1a0
[ 1530.944622][T15118]  __x64_sys_read+0x3e/0x50
17:12:19 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x4, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1530.963941][T15118]  do_syscall_64+0x2b/0x70
[ 1530.968416][T15118]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[ 1530.975219][T15118] RIP: 0033:0x7f7c9332bc9c
[ 1530.979698][T15118] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1530.999407][T15118] RSP: 002b:00007f7c92aef160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
17:12:19 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x2c, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:19 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x1000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:19 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

17:12:19 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x34, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1531.002908][T15146] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1531.007829][T15118] RAX: ffffffffffffffda RBX: 00007f7c9348bf60 RCX: 00007f7c9332bc9c
[ 1531.007869][T15118] RDX: 000000000000000f RSI: 00007f7c92aef1e0 RDI: 0000000000000005
[ 1531.007884][T15118] RBP: 00007f7c92aef1d0 R08: 0000000000000000 R09: 0300000000000000
[ 1531.007899][T15118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1531.007963][T15118] R13: 00007fff688b98ef R14: 00007f7c92aef300 R15: 0000000000022000
[ 1531.007983][T15118]  </TASK>
17:12:19 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

17:12:19 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x7, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1531.072641][T15153] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
17:12:19 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000380)="baa00aebc94161a9c1675543a608b6b209e2c59ddbe6002882b898825cee6702d06fdf6924ed299742a1a912c67fab91217505d34618dd97e619c08a7311a9a5804ab29345c28ff1cc0dad2fa19ab764966f739edd8399613dc992ce0ca950fadb5f39b299b710bc90e0b410b40c67d0dcb3ec7a1a64d9e2d7daa4baae3e48e7dade8b3d9e63214e073aa1897390ebbc2a35985ba22fe962158510dc8e606bfcb299f025fb6d6df7115369a31cf2c9952e54fe3d4196e0f63648efa0bebadc2835e6628adf12940845505c68626e169b1edf0df7185f9009033090fa5896f2", 0xdf, 0x91, 0x1, {0x0, r7}}, 0x10000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
socket$inet(0x2, 0x6, 0x5)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

[ 1531.127871][T15160] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:20 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
r9 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r1, r8, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0xffffffff)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x0, 0x7f, 0x4, 0x2c3, 0x8, 0x269, 0x1}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb1b)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000100)=0xffffffff, 0x0, 0x4)
io_uring_enter(r0, 0x3f39, 0x1e5f, 0x3, &(0x7f0000000000)={[0x20b]}, 0x8)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r7, r8, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r1, r8, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0xffffffff) (async)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000380)={{0xcc, 0x0, 0x7f, 0x4, 0x2c3, 0x8, 0x269, 0x1}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xb1b) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x118, &(0x7f0000000100)=0xffffffff, 0x0, 0x4) (async)
io_uring_enter(r0, 0x3f39, 0x1e5f, 0x3, &(0x7f0000000000)={[0x20b]}, 0x8) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x2, 0x0, 0x0, 0x300000000000000)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x2000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x48, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xc, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async, rerun: 32)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (rerun: 32)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async, rerun: 32)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 32)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000380)="baa00aebc94161a9c1675543a608b6b209e2c59ddbe6002882b898825cee6702d06fdf6924ed299742a1a912c67fab91217505d34618dd97e619c08a7311a9a5804ab29345c28ff1cc0dad2fa19ab764966f739edd8399613dc992ce0ca950fadb5f39b299b710bc90e0b410b40c67d0dcb3ec7a1a64d9e2d7daa4baae3e48e7dade8b3d9e63214e073aa1897390ebbc2a35985ba22fe962158510dc8e606bfcb299f025fb6d6df7115369a31cf2c9952e54fe3d4196e0f63648efa0bebadc2835e6628adf12940845505c68626e169b1edf0df7185f9009033090fa5896f2", 0xdf, 0x91, 0x1, {0x0, r7}}, 0x10000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
socket$inet(0x2, 0x6, 0x5)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x2000, 0x0, 0x0, 0x300000000000000)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x4c, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x20000, 0x0, 0x0, 0x300000000000000)

[ 1531.221897][T15187] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1531.233594][T15189] netlink: 'syz-executor.3': attribute type 9 has an invalid length.
17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x12, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x3000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x60, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0xf0ff7f, 0x0, 0x0, 0x300000000000000)

17:12:20 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0) (async)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000380)="baa00aebc94161a9c1675543a608b6b209e2c59ddbe6002882b898825cee6702d06fdf6924ed299742a1a912c67fab91217505d34618dd97e619c08a7311a9a5804ab29345c28ff1cc0dad2fa19ab764966f739edd8399613dc992ce0ca950fadb5f39b299b710bc90e0b410b40c67d0dcb3ec7a1a64d9e2d7daa4baae3e48e7dade8b3d9e63214e073aa1897390ebbc2a35985ba22fe962158510dc8e606bfcb299f025fb6d6df7115369a31cf2c9952e54fe3d4196e0f63648efa0bebadc2835e6628adf12940845505c68626e169b1edf0df7185f9009033090fa5896f2", 0xdf, 0x91, 0x1, {0x0, r7}}, 0x10000000)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
socket$inet(0x2, 0x6, 0x5) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff) (async, rerun: 64)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 64)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x68, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x4000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1531.316186][T15206] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x29, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x6c, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x5000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x1000000, 0x0, 0x0, 0x300000000000000)

17:12:20 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000980)={&(0x7f00000005c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000640)="4f4dfe5c68f024504b17064402dfd9a074479f832f7d04fbc3c46bda9f2a8428541b9f7b927b1aec52ca9cc61e31807ac49b3cdd5b374661b76074bb7aad21f61291cbbc", 0x44}, {&(0x7f00000006c0)="87acf6550082bb710852c655928f3af160cc1fea841dfd3605fbd7b750abc00bb732ba4a3e593ed356d4aa4c1925f9fbaeca393e0f11cf474784c7899a042aba5198e4944c45", 0x46}, {&(0x7f0000000740)="e6", 0x1}, {&(0x7f0000000780)="7dd33804cb4ca8a58fe77fd9f2a5c47384cb7c0eee25460c2cb8f40b9eba611e4d5ce3cf178cfe2a08d50167c4059b1b810581059fe4a39d7655ef7bdd6f014659efa1d7de6c8383dd933ded95bd6970c2a718ab77aaa45428700c48500f68ca801d979fe17614be44741cc204b9471913e74902345c9d881b7e2e8ddb11a09794b54776e0dacb52e841a25cf4fbde92a07a1d7a00a5f075542087d1511c566785a51a075639e4f97d6fd4431b87f4dfdc163ae05498210137caccf16f8ec135b9948f1840144517d3958510abe4ab9c90e0db2c213f0c8bd0714dc698c4f616c1026551a5d0f81c560c", 0xea}, {&(0x7f0000000880)="b1ab4613fbc990a4d14257d1f0e5a3a53ce416afd23e933608cf1257b1780c2c4ebe7b12c50c58bc471509e5f90e4a69c478c5366dca206cbcfba2ee9578bb06c1aa0001acae02990ab1fb5d", 0x4c}], 0x5, &(0x7f0000001980)=[{0x1010, 0x94, 0x9d73, "e3c1dd8d55f0a30c2d018a6a5a890b1d1bc683e91621ae088e19c1789af04892e7fe5012d8624cf483ed010b1d44f29b31b1ce7f307f4d502ac2c16ee38292466c92f13adebdddd6c93e3188bdd800ac1fefccd9d380e5033f63fa81c29c5c89e1b2eb6f58628faa1ea4f05b9f987bc60681ded0aab8dd0e1c3e6eea2a25dee5da30465848f6ac36fa584b67db1995db9ff18c19abb5559aa1e238408891dbefb81c4196164ed6872196898e067e5a5d81f1188dbd05f3e6f83471f80393f659eb898b0852cdc8b9cad282e14db50326d977a7cc32061bff0a21211524854225fcdbb6fa55e1c2eb4c6552dbcff9fd5a783cd819c3caa540561755a358bf3c97340defce6092e870a70f52bc87d933e6013069831d3c707dffd2c5fdef2505190b400d8f16ce16b9a6497ae0c6f7d417a973fd7a1bae63b3b888881d8d23c6f73b16546cf5856fc92e9ac308c8d2246925d815751771fbcb6c87a7a14b65f1ac24ca932001438c2e534ecbc401df33fc6a57c6aab3cd7e51afd7eb0a6f86e17efb631e66eb29e76aea2ddf057fe06d55c5b5fb99418998092af537dd0856370fdc44e2016ecc3d26ebbe389fc62dace246f2013a1386231aa2a88a686b1db93bb119121ac487d2e45686f6a6b198220e99ffcea3dce853d965af7e1f712e9130471883339da453e198ce1837d626eb93cacdd3d351623ebd38fd1199efcac38dff4a7e2feab3b048e693fc6c532bfdcfce3ddd0126120af59df6cdcece4ce58ba349457268174bbbe7c34b8b345cef2685c73caf7eab46d2bf68f37be173a5d7b1b325f8d81480b37ec1dd1d9fd4bfef52bd31459165474af200a3c903aa09072b02666b66bb7d29ccf6f1012b56830c73a7b3a942b04b1b4715c766b44a711bfbba6a9f0cffc1023eb0e3094e6121122fcae34fe6397a112dac9cc3881226d9e7b7efd9571f6062475b7ef5b5090257fea91db58154cf7c8ae63ffa3c23b68d943261599da23041be93042a00e7e3bfbc90eabdd2a196ee23c47120cb907dfd3fe0581799891e4d32b0165938060a3021d4322fe9f23ef5c4d00fa0c9b216a3b00b63ea2127e95f54c18c17184928447e17d73c35dd9aa97c578bffff4a84e8595a452fcfefccd5c71fd71b84d272be034a157879841655dc08d96f107682ec023cc29191409793371244c274decd1e1389cce8c37d55d6cbd36536dcdc6bf4fc418c92d779d6ef5945bc2ba236900b37958583a7d6387cfb92f4e02631708f4c8036c9785869f264c2f58e5d88611b8ff835854d70b3798bc7cd712d14595c288436d9d45603a8acf0b46496ad7c4bb2fd2c074b53eacce9eefdc95aa6b5272192c91ff80e8222cb55aa41da6f2021e55bdc14261bf4df18aa9d73b0e265df23daf7d6e6b90c811c03caf10038e543b23a799aa0329249436a8d1fb07016e67503d5a0fb26192ab3fc70d6ce75945c95b146777045428c08df2af734d184d95e91319bc407c2f03072fd3d9822591de828fd221822c83184453e49491502bad7867eb21ccd66ae24f540af96fc0a4cb9d60f14f4cffecf9049ac338d386ccc6992b9b79c74c53c69c740b961d9ab3a31da43b3a4e26e73e627138b7788c233547d08ee9af3912040471d293d1658f557882fb575be2a295b573dd701036013ceb4f10d9ace23313b68e46c45ed04ac1a5ac9c73e1ca0f5a850bab70f9fb5a74e186892c2c97cb7c2dbef2920deb229ced53c0ccf442aca3893bc5f8b4b8b1bdb4ffae814e71e338ffbb3ecd5d1f495aa062ade0f60cb392eb8c653032712ccfaa214d1b90095d9a5c15f4328b3c8148f92b957f4caa3a310f3f7acf98503298ef60be31aa086001f0c0a2bdf1891406a484e043d5bf6e5b5a293c9cd152098fe403f97ac3670fbe29b9f774f5446248e09b667a55ac22a7f34960a62ac9fbb581dc0313cde2f53911d61c47cb57deae440ceee95361d4194f5c64003e5c20594770a12a270b73692bd42975eea47c67e6af58172b1486e291ab72e9fbf025a31191ac1f50c51623ba01ab2b5ce22739c9b9cb48af0a4ee05a09ec148b0e201eea7eda041140bfa3b657b5dee9fabed3cd39b1069fb467849b6bb165a906dffa9059fb46539378e8c2d211ae8ed661a1410d54858c761a9fb5d6de1012e2e1d1ae1dfff3413097729e21c5d018072c4ca27a95f24a4cc7fc8a28bbaeadedae9a759b2b26677ed6ef9ba34d11c19a6e9846b0b31ff0f809eaabc7fba0d45f8b41b611e35be49dc12e880939302b259d3d277dae0ca3f80b3656fbb4fe8653abb2864aab28dbe847626f00a647ff609356d9e9430767e6a3733bc159596018fdb7c16dc92f657274db492325f625c03ab2e929a22356aa23c7cd1078cad61a41f4cfc1d124ed85f6d6369c94d2aaa0cbc30402e0e90f3dce2ace8d3a8ea219b8b05555339294f2c0eb54559ff9af4ea14db315a9182b088f1214ef1f2e5b1d3ff6a44c13603fa1b87bf67e0f82db285c487d9ba1473906393e6ca04221e480035ce051e6f167cf99d11e0c9b2cf05da4877e3a91e1bd509b2c8e49a2cfdb627c0dd32b96c29a15c8f5ab7cbab989c07a9bfe36681f791412502b51ac01ca73582387f5420191d42109a5ea8548c01dba2bb463f2e968a820acbafd497ba147f5475e74894e060192574c5b3e302b07aca4ee1bc9f7c316195691d9c04ea8320982c7882afd1fc7e89443de7f4ae2842f923cb1b1aedec3ddcef485b007583f401eb6d2a4759a56684d81b4856e0f38533290364c26d1102dfa1f9742cfaca6565d9f1716aecbf466eff0dac505d670c80ccd343e86f4691c1037c855de55dfa7f8be544fc023ae71aaf64e64fdd2d7752695fc533e74b6944a176957fb82f0db7dea29ab020c4f29f33007cbaf140bb9dd16bbaa85fba6bff3eb0a11262b106c9ef6484eb3327cf4417434189cca8a36494794223676f19a64616ce263b069bb1ae5e97cbbb2e1fce5323d002ae83c149930dc7ace77bc73e6d0740a983ba1ff5849a4573419f02acede80dd5172dd9497b1f466d39addfe1c8ff7f9dc2dd9a2124009322166a9f5b4f9eeeb81e906ca50337aa81be519b2945c3f7f439a7dc5e5a4100d964caff265d83db5eb3ce56c779c64df486d958cbf4936b31bc1bafae97d3b5f280f28729cfac5ef42303ffd2046e22e8e857f67a2a14a34351ed428997a96639409694465336dce8b9e808281226087967a47763ecb6f193b1824cc44f8672140c47b9cdae6bc4c02ac4ec3df80cb12aa4fda79f8706a867dc8dcbc1f224a4e3f88cc9214598af3c074dc5e2fa4af6079bbb19f1920936273aa0a80da856af461d83f6d90d260efbd8c1ca238a69720a5b1fc206985846ee4aaeb9904eb17ddd29e118d81e36ba0faf5e0397d82db960484a51ca9088140a8b3feeb77c348b700e963c3a9993ab183aca8659058b828ab35890a210695e0b605413a5245757c39f00613687ee1883f6144a98a49a6f9764e7d5cbd5311a96733322cbaec25b2e549fffcd90a7776de137e6fd8f54733223e287f1466cb14877439b2b4a861df3e467e03ab71109516b93e66654b2c354267d73838eaf37516caeeaf4953c6d621ecd28507e350dd28736b575c7b349df250e275ac72297be8a8f29c62f6a779eeaeb6ba7ac345706cfe90d9895360c1429894dcd9ecbf5949901cd51c83f46f84183d6c85679591354b2f2116d6e8a979287c89850a3a6c62be578a9c5251a93cf4ebef6071512372e064b8afc095adc9895e05689bf491cc0b527f2fc5c18ec88188f690dd111e0b32ea38230bf58f3df283c835167b9e61fd67b35b79d563eb9d326e3c5e06c0c8f229da7b3ec043f3f663ece3ec7989c3d1509ce32e90db1366693c2b3e30632c34d7d9deaf53094dc3480c7cd1045394b7b580bfd2376899cc33ed68f3524cfd9e4e99f63f508dc457f9026feae0643f948f241a7558c281e26a3d0066a0dea1fc27563bae331f33c77991ce3ea66c9ee36e44d497da6cad1ac37f6072516bac28a622d3451525ff5e16596bb4f77a8f31272a441fb704dabbdd0a0037ab4ae7da229df77d0b8ad9db9e6c27f470d0a95a1764298df8296de4b5476041463d08b172371b57650be9177ed45fcb07defc4fac83eaea1ec526861b726ee39fb506a8598223df263b4a7a109227343f94c805b3c4bd8e0057576d60149a95f6392a7e9f9069f2aa8b25d7bd9bf3b0bceb7bb49b2ec5830c92e21583f5d05f8d647fb41ade2fbec4a56fc8831244bc7ed9171b204f9d276653e2a186f195b78297f03d1d55e967fae2ae22c654f40ed418523ed8a0ef6bbb8a8dda7b618141732fc5743e096db17ecf00ff3f179012100811e428e2326151186923b4429c45a584700d53474a1bcafc9ad589e7e62b86e8efe5eb5adb4524536c7d51c1ca8c5a1e23cda78c757055096cb1e415e503bcc205d6797bf1ce433d77bc50965f78c1a94414b173ef6e1bea7a505a61b999bd3ee5fb4dd52db2c143aa9fd1e9a7953b64cd8d2925d74bbb516dcb62e56f1e4ce955138d6606183eba5377d695f9bcc574dfe736daab9627797fc3e6f51ed4f268e782093bf2cb9be78001b71e1d54e43fdbe07d3aff5b30d62c301aec81c4f1597fd2234a93f14d8d26e8bf13ef65ca8a1c0143434b82a694566679cc181155f48557f068dfbedbd67fe09102a2fadf9d0a7c1943dfafafaf80e1c76f4dfacb4701261111380e9c92357a3b6a55c0754c4ce9be0781856aaedba1302123a0994a3c359e1319818464b8ceb2f2db387884872e7fd19a2bc2f8ab657fc1bcbae089a2b2e1c201ce32d6ebd6fee48c85e26ece2d2cb52a24dd86f4e14e2ed4f5e5608cb269960bb9cab8f54dcfcad40af569678c2e212a42d8c0a1b0e93dae9f1fcaa5f4b77d359e40960d4ac5632d0a5934b387b184e311931885f1d3fe9a7a8d7edef74b506893cf856e251b57366501fb1a69c9148367c774fefee616e91523d08f786458250e10576c37b289d01189f801d9545719ca3c97f7378ad6482efa828fcfd600c14bea0df1b68b04520e5a706324f86a6b7a49f1ae3d8c94c36fe64b51a5aaded6ec3281b504e797bedb6f3afb1bf440dffcb40c5ab88c7016c4a99c576d294b2ef7e95d5062a2d5e8a6488987498b877b146432978f23a701af50dac35fcf5f4d45b640c316d701032fdaa60de0bc5f83809d43c62afe8f06ac9df442e70f6f267b4d36baa933da648a7a657ddff9b3b1d6a6658e8f25b5f66af3e54f42e6f9665e96453df372b3b9f8bd43885d812cfd8a97bd47f160aa76d9dc6f0b3cf3a343364f0ac4e68833776c13d183906b2abe848e49d5c896c4e0e3a3e7f6684ef6d754bb6214c0d88dbc2489f16da89e3ba3e05f7e12cf2d11981d0aef1b8f4f6a6f4884800fcddd84931d93da79c6aa71a6f8c559d1e8aba9d9547742027c60fb25f751ca03655b99e9a79fc23bced09a2a07c26ec1dff1796cb024ef0d2e5698322d79dae519cc7be5e15eb5adaab074ddd58c3fc3ca2ebaf73e9adde177b25b4656ead4232891c6a1d14c6b46dca3af0efcf537328a76150bde76ebdc2ef1e45e1012c2cdf195445f7be8eaedf0ee90f4812a28e7eada578afdc4a69b1be31335464b6f24417200ee7eff7b03cf247115294731babdc52f6e9a726ff67a2f82eb2061839436d5ed3059389a8c27f21dc810bd33fc03156d295ccca093fd2676d4793d8387a5936adfe65d0b7414897939b0255d230e0e872ccbff2ff61525c3c"}, {0x58, 0xff, 0x200, "27c02511a71e3cc77ff208c62d1b5170315668e238eed3fd21eeb5f91abcb90f452ed7c50b8e97c44af1d882f3a9016f5a83a5f2ea67459c19ae6a826b8617560526"}], 0x1068}, 0x0, 0x80, 0x1}, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)=""/92, &(0x7f0000000480)=0x5c)
r8 = accept4$nfc_llcp(r0, &(0x7f0000000380), &(0x7f0000000280)=0x60, 0x1000)
syz_io_uring_submit(r4, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x1, 0x4, 0x0, {0xa, 0x4e21, 0x432a, @rand_addr=' \x01\x00', 0x672}}}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x74, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x2000000, 0x0, 0x0, 0x300000000000000)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x6000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x7a, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x7000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1531.402437][T15242] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x20000000, 0x0, 0x0, 0x300000000000000)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x34, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x88, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x8000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xae, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0) (async)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000980)={&(0x7f00000005c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000640)="4f4dfe5c68f024504b17064402dfd9a074479f832f7d04fbc3c46bda9f2a8428541b9f7b927b1aec52ca9cc61e31807ac49b3cdd5b374661b76074bb7aad21f61291cbbc", 0x44}, {&(0x7f00000006c0)="87acf6550082bb710852c655928f3af160cc1fea841dfd3605fbd7b750abc00bb732ba4a3e593ed356d4aa4c1925f9fbaeca393e0f11cf474784c7899a042aba5198e4944c45", 0x46}, {&(0x7f0000000740)="e6", 0x1}, {&(0x7f0000000780)="7dd33804cb4ca8a58fe77fd9f2a5c47384cb7c0eee25460c2cb8f40b9eba611e4d5ce3cf178cfe2a08d50167c4059b1b810581059fe4a39d7655ef7bdd6f014659efa1d7de6c8383dd933ded95bd6970c2a718ab77aaa45428700c48500f68ca801d979fe17614be44741cc204b9471913e74902345c9d881b7e2e8ddb11a09794b54776e0dacb52e841a25cf4fbde92a07a1d7a00a5f075542087d1511c566785a51a075639e4f97d6fd4431b87f4dfdc163ae05498210137caccf16f8ec135b9948f1840144517d3958510abe4ab9c90e0db2c213f0c8bd0714dc698c4f616c1026551a5d0f81c560c", 0xea}, {&(0x7f0000000880)="b1ab4613fbc990a4d14257d1f0e5a3a53ce416afd23e933608cf1257b1780c2c4ebe7b12c50c58bc471509e5f90e4a69c478c5366dca206cbcfba2ee9578bb06c1aa0001acae02990ab1fb5d", 0x4c}], 0x5, &(0x7f0000001980)=[{0x1010, 0x94, 0x9d73, "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"}, {0x58, 0xff, 0x200, "27c02511a71e3cc77ff208c62d1b5170315668e238eed3fd21eeb5f91abcb90f452ed7c50b8e97c44af1d882f3a9016f5a83a5f2ea67459c19ae6a826b8617560526"}], 0x1068}, 0x0, 0x80, 0x1}, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)=""/92, &(0x7f0000000480)=0x5c)
r8 = accept4$nfc_llcp(r0, &(0x7f0000000380), &(0x7f0000000280)=0x60, 0x1000)
syz_io_uring_submit(r4, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x1, 0x4, 0x0, {0xa, 0x4e21, 0x432a, @rand_addr=' \x01\x00', 0x672}}}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 32)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x7ffff000, 0x0, 0x0, 0x300000000000000)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x9000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x88, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xc4, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1531.495110][T15265] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xa000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x2, 0x0, 0x300000000000000)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xd0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xd4, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x2000, 0x0, 0x300000000000000)

17:12:20 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
r5 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
r9 = mmap$IORING_OFF_SQES(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x2, 0x10, r5, 0x10000000)
syz_io_uring_submit(r6, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd_index=0x9, 0x9db, 0x0, 0x0, 0x0, 0x0, {0x3, r8}}, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={r3, r4+60000000}, 0x1, 0x0, 0x1, {0x0, r8}}, 0x9)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r10 = socket$inet(0x2, 0x4, 0x7f)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
io_uring_enter(r5, 0x12fd, 0xca59, 0x1, &(0x7f00000001c0)={[0x5]}, 0x8)
bind$inet(r10, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xb000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1531.557855][T15282] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:20 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000980)={&(0x7f00000005c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000640)="4f4dfe5c68f024504b17064402dfd9a074479f832f7d04fbc3c46bda9f2a8428541b9f7b927b1aec52ca9cc61e31807ac49b3cdd5b374661b76074bb7aad21f61291cbbc", 0x44}, {&(0x7f00000006c0)="87acf6550082bb710852c655928f3af160cc1fea841dfd3605fbd7b750abc00bb732ba4a3e593ed356d4aa4c1925f9fbaeca393e0f11cf474784c7899a042aba5198e4944c45", 0x46}, {&(0x7f0000000740)="e6", 0x1}, {&(0x7f0000000780)="7dd33804cb4ca8a58fe77fd9f2a5c47384cb7c0eee25460c2cb8f40b9eba611e4d5ce3cf178cfe2a08d50167c4059b1b810581059fe4a39d7655ef7bdd6f014659efa1d7de6c8383dd933ded95bd6970c2a718ab77aaa45428700c48500f68ca801d979fe17614be44741cc204b9471913e74902345c9d881b7e2e8ddb11a09794b54776e0dacb52e841a25cf4fbde92a07a1d7a00a5f075542087d1511c566785a51a075639e4f97d6fd4431b87f4dfdc163ae05498210137caccf16f8ec135b9948f1840144517d3958510abe4ab9c90e0db2c213f0c8bd0714dc698c4f616c1026551a5d0f81c560c", 0xea}, {&(0x7f0000000880)="b1ab4613fbc990a4d14257d1f0e5a3a53ce416afd23e933608cf1257b1780c2c4ebe7b12c50c58bc471509e5f90e4a69c478c5366dca206cbcfba2ee9578bb06c1aa0001acae02990ab1fb5d", 0x4c}], 0x5, &(0x7f0000001980)=[{0x1010, 0x94, 0x9d73, "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"}, {0x58, 0xff, 0x200, "27c02511a71e3cc77ff208c62d1b5170315668e238eed3fd21eeb5f91abcb90f452ed7c50b8e97c44af1d882f3a9016f5a83a5f2ea67459c19ae6a826b8617560526"}], 0x1068}, 0x0, 0x80, 0x1}, 0x0)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)=""/92, &(0x7f0000000480)=0x5c)
r8 = accept4$nfc_llcp(r0, &(0x7f0000000380), &(0x7f0000000280)=0x60, 0x1000)
syz_io_uring_submit(r4, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x1, 0x4, 0x0, {0xa, 0x4e21, 0x432a, @rand_addr=' \x01\x00', 0x672}}}}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000980)={&(0x7f00000005c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22, 0x3}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000640)="4f4dfe5c68f024504b17064402dfd9a074479f832f7d04fbc3c46bda9f2a8428541b9f7b927b1aec52ca9cc61e31807ac49b3cdd5b374661b76074bb7aad21f61291cbbc", 0x44}, {&(0x7f00000006c0)="87acf6550082bb710852c655928f3af160cc1fea841dfd3605fbd7b750abc00bb732ba4a3e593ed356d4aa4c1925f9fbaeca393e0f11cf474784c7899a042aba5198e4944c45", 0x46}, {&(0x7f0000000740)="e6", 0x1}, {&(0x7f0000000780)="7dd33804cb4ca8a58fe77fd9f2a5c47384cb7c0eee25460c2cb8f40b9eba611e4d5ce3cf178cfe2a08d50167c4059b1b810581059fe4a39d7655ef7bdd6f014659efa1d7de6c8383dd933ded95bd6970c2a718ab77aaa45428700c48500f68ca801d979fe17614be44741cc204b9471913e74902345c9d881b7e2e8ddb11a09794b54776e0dacb52e841a25cf4fbde92a07a1d7a00a5f075542087d1511c566785a51a075639e4f97d6fd4431b87f4dfdc163ae05498210137caccf16f8ec135b9948f1840144517d3958510abe4ab9c90e0db2c213f0c8bd0714dc698c4f616c1026551a5d0f81c560c", 0xea}, {&(0x7f0000000880)="b1ab4613fbc990a4d14257d1f0e5a3a53ce416afd23e933608cf1257b1780c2c4ebe7b12c50c58bc471509e5f90e4a69c478c5366dca206cbcfba2ee9578bb06c1aa0001acae02990ab1fb5d", 0x4c}], 0x5, &(0x7f0000001980)=[{0x1010, 0x94, 0x9d73, "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"}, {0x58, 0xff, 0x200, "27c02511a71e3cc77ff208c62d1b5170315668e238eed3fd21eeb5f91abcb90f452ed7c50b8e97c44af1d882f3a9016f5a83a5f2ea67459c19ae6a826b8617560526"}], 0x1068}, 0x0, 0x80, 0x1}, 0x0) (async)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)=""/92, &(0x7f0000000480)=0x5c) (async)
accept4$nfc_llcp(r0, &(0x7f0000000380), &(0x7f0000000280)=0x60, 0x1000) (async)
syz_io_uring_submit(r4, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r8, 0x2, 0x1, 0x4, 0x0, {0xa, 0x4e21, 0x432a, @rand_addr=' \x01\x00', 0x672}}}}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x9a, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xe0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x20000, 0x0, 0x300000000000000)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xc000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xd000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x118, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xae, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xf0ff7f, 0x0, 0x300000000000000)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x122, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
r5 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
r9 = mmap$IORING_OFF_SQES(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x2, 0x10, r5, 0x10000000)
syz_io_uring_submit(r6, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd_index=0x9, 0x9db, 0x0, 0x0, 0x0, 0x0, {0x3, r8}}, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={r3, r4+60000000}, 0x1, 0x0, 0x1, {0x0, r8}}, 0x9)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r10 = socket$inet(0x2, 0x4, 0x7f)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
io_uring_enter(r5, 0x12fd, 0xca59, 0x1, &(0x7f00000001c0)={[0x5]}, 0x8)
bind$inet(r10, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
clock_gettime(0x0, &(0x7f0000000000)) (async)
syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000040)) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x2, 0x10, r5, 0x10000000) (async)
syz_io_uring_submit(r6, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd_index=0x9, 0x9db, 0x0, 0x0, 0x0, 0x0, {0x3, r8}}, 0x1) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={r3, r4+60000000}, 0x1, 0x0, 0x1, {0x0, r8}}, 0x9) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x4, 0x7f) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
io_uring_enter(r5, 0x12fd, 0xca59, 0x1, &(0x7f00000001c0)={[0x5]}, 0x8) (async)
bind$inet(r10, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xe000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x1000000, 0x0, 0x300000000000000)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xf000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xc4, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x162, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0))
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd=r4, 0x8000, 0x2, 0xffffffd6, 0x0, 0x1, {0x2}}, 0x3)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x1b0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x2000000, 0x0, 0x300000000000000)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x10000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r3=>0x0, <r4=>0x0})
r5 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
r9 = mmap$IORING_OFF_SQES(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x2, 0x10, r5, 0x10000000)
syz_io_uring_submit(r6, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd_index=0x9, 0x9db, 0x0, 0x0, 0x0, 0x0, {0x3, r8}}, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={r3, r4+60000000}, 0x1, 0x0, 0x1, {0x0, r8}}, 0x9)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r10 = socket$inet(0x2, 0x4, 0x7f)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
io_uring_enter(r5, 0x12fd, 0xca59, 0x1, &(0x7f00000001c0)={[0x5]}, 0x8)
bind$inet(r10, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
clock_gettime(0x0, &(0x7f0000000000)) (async)
syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000040)) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async)
mmap$IORING_OFF_SQES(&(0x7f00005f0000/0x2000)=nil, 0x2000, 0x2, 0x10, r5, 0x10000000) (async)
syz_io_uring_submit(r6, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd_index=0x9, 0x9db, 0x0, 0x0, 0x0, 0x0, {0x3, r8}}, 0x1) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={r3, r4+60000000}, 0x1, 0x0, 0x1, {0x0, r8}}, 0x9) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x4, 0x7f) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
io_uring_enter(r5, 0x12fd, 0xca59, 0x1, &(0x7f00000001c0)={[0x5]}, 0x8) (async)
bind$inet(r10, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x1b2, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x11000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x20000000, 0x0, 0x300000000000000)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd4, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x1b8, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x12000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0))
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd=r4, 0x8000, 0x2, 0xffffffd6, 0x0, 0x1, {0x2}}, 0x3)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0)) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd=r4, 0x8000, 0x2, 0xffffffd6, 0x0, 0x1, {0x2}}, 0x3) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x7ffff000, 0x0, 0x300000000000000)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xe0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x7ffffffff000, 0x0, 0x300000000000000)

[ 1531.881982][T15391] xt_NFQUEUE: number of total queues is 0
17:12:20 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x1, 0x1, {0x0, r6}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x300000b, 0x10, r0, 0x10000000)
syz_io_uring_submit(r3, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f0000000480), 0x0, 0x40000042, 0x1, {0x0, r6}}, 0x2)
syz_io_uring_setup(0x629e, &(0x7f0000000380)={0x0, 0x764f, 0x1, 0x3, 0x232, 0x0, r0}, &(0x7f0000149000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r1, r8, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x4}, 0xe8bc)
r9 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1}, 0x9)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x24f, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x118, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x20000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x2000000000000, 0x0, 0x300000000000000)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x255, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x25000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (rerun: 64)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0))
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x4004, @fd=r4, 0x8000, 0x2, 0xffffffd6, 0x0, 0x1, {0x2}}, 0x3)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32)
dup(0xffffffffffffffff) (async, rerun: 32)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x122, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xf0ff7f00000000, 0x0, 0x300000000000000)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x48000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xf0ffffff7f0000, 0x0, 0x300000000000000)

17:12:20 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x1, 0x1, {0x0, r6}}, 0x0) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x300000b, 0x10, r0, 0x10000000)
syz_io_uring_submit(r3, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f0000000480), 0x0, 0x40000042, 0x1, {0x0, r6}}, 0x2) (async)
syz_io_uring_setup(0x629e, &(0x7f0000000380)={0x0, 0x764f, 0x1, 0x3, 0x232, 0x0, r0}, &(0x7f0000149000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r1, r8, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x4}, 0xe8bc) (async)
r9 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1}, 0x9) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x262, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x162, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x4c000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x100000000000000, 0x0, 0x300000000000000)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x2cd, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:20 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x4e44, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000146000/0x4000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
io_uring_enter(r4, 0x80e, 0xbb, 0x1, &(0x7f0000000100)={[0xb0f6]}, 0x8)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x60000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x1b0, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:20 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x200000000000000, 0x0, 0x300000000000000)

17:12:20 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x65580000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:20 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x2d5, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1532.083308][T15464] net_ratelimit: 3805 callbacks suppressed
[ 1532.083323][T15464] dccp_time_wait: time wait bucket table overflow
[ 1532.118458][T15464] dccp_time_wait: time wait bucket table overflow
[ 1532.138681][T15464] dccp_time_wait: time wait bucket table overflow
[ 1532.160565][T15464] dccp_time_wait: time wait bucket table overflow
[ 1532.182375][T15464] dccp_time_wait: time wait bucket table overflow
[ 1532.189948][T15464] dccp_time_wait: time wait bucket table overflow
[ 1532.196641][T15464] dccp_time_wait: time wait bucket table overflow
[ 1532.203492][T15464] dccp_time_wait: time wait bucket table overflow
[ 1532.210317][T15464] dccp_time_wait: time wait bucket table overflow
[ 1532.217418][T15464] dccp_time_wait: time wait bucket table overflow
17:12:21 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x1, 0x1, {0x0, r6}}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r7 = mmap$IORING_OFF_SQES(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x300000b, 0x10, r0, 0x10000000)
syz_io_uring_submit(r3, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f0000000480), 0x0, 0x40000042, 0x1, {0x0, r6}}, 0x2)
syz_io_uring_setup(0x629e, &(0x7f0000000380)={0x0, 0x764f, 0x1, 0x3, 0x232, 0x0, r0}, &(0x7f0000149000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r1, r8, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x4}, 0xe8bc)
r9 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1}, 0x9)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
syz_io_uring_submit(r1, r4, &(0x7f0000000440)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x1, 0x1, 0x1, {0x0, r6}}, 0x0) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
mmap$IORING_OFF_SQES(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x300000b, 0x10, r0, 0x10000000) (async)
syz_io_uring_submit(r3, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f0000000480), 0x0, 0x40000042, 0x1, {0x0, r6}}, 0x2) (async)
syz_io_uring_setup(0x629e, &(0x7f0000000380)={0x0, 0x764f, 0x1, 0x3, 0x232, 0x0, r0}, &(0x7f0000149000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f00000001c0)) (async)
syz_io_uring_submit(r1, r8, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x4}, 0xe8bc) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1}, 0x9) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x2000000000000000, 0x0, 0x300000000000000)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x1b8, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x2e1, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x68000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x4e44, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000146000/0x4000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
io_uring_enter(r4, 0x80e, 0xbb, 0x1, &(0x7f0000000100)={[0xb0f6]}, 0x8) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x300, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x6c000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0xffffffff00000000, 0x0, 0x300000000000000)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x1c5, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x322, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x1000000000000)

17:12:21 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="f5a53a1c79783a4780f2379251e9092d92130d17163d29937e9f85414a46243df8c5838766d2a308228d64a11f0509104a7c8dc35e1cac6305fea07862d53b387666d41706865604a1afba4fd4adf7f517c85eca3ee33f", 0x57, 0x40080, 0x1, {0x0, r6}}, 0x0)
r7 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r8=>r7, {0x4}}, './file0/../file0\x00'})
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f00000000c0))
io_submit(0x0, 0x6, &(0x7f0000000a00)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x1ff, 0xffffffffffffffff, &(0x7f0000000380)="16b9877bcd61c15be64f91b5315d145f2206a0ad71ec8f86deb26f247266112b64be2c8791f56757b489003a09db9c2a63d8d9f3e9210bd6439d0472bc7551a55f8d75d664d66e952be177994087904b9ca664ea", 0x54, 0x4, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x7, r7, &(0x7f0000000440)="9b002ae834cce069896c25bb06dcf6996800d757fe2b45bfa4096739c3ecd2e146ce2c33d3e557c89171fa278d58720b0d1ca791793d8a76a0919db27f6993b276b264f9b8c77ae471652ba0fbb1a87f790c81f7cdf1d6f540fd4522ee650ca03bb1440aa3e4e846a6a425c8c14ea65f2d829a5199273c5d438af30bf7b0564a47c4d03080a2759024972156ef79e5326868ab0258dbd9afe2b4c09efbf42bdff126ec1343abb4e9e91b706e721e0f56c4328e3f443c8388e44b1ee637cf726c5fd6c0809776ca9ca7f1551d494d230789b7168c48203114510af3c9cff1", 0xde, 0x62, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000580)="bf24a9174210535e1db6f7a72242127ad55a60c3763012a2a8a5429e1f04a71d444b77ec3c6d4d8c44c9f55a32af77e1ed1eaf22c1311998e0111ed881a2dd4666cc7f22bc8568f6fc3dc018c649001ad28313cfe4eda2c9aecea492c306407d47733b20776bf225f8fc427a0c8735c8690830dee23b3ce176e68e0c91bbe1979c70cee123c17b231fb61e9e1b03a865e9508eb6cd2bb358db1c87e05e37d54f45c4206262633d30d499b4daa7682ddfcf6392b342c91566f24d36fb1c0307602b1c1c562bc0916045b5b8e7ae1af5f8affd6f79", 0xd4, 0x7fffffffffffffff, 0x0, 0x2, r8}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x5, r7, &(0x7f0000000700)="6e98cdddbb2b1eb85a97a2bf0162e584a7bc40f4d5857089c91ff331ab48e41f65b53e60d59f59ba2f8a42a0e2c2abfbfdc841dede7cb406c806bfacef7a28c4392fe31b8e9f0a6949ad5f1de0f9f7e3cb775c11ddca2948e90107a47a10a5e35f281ec2916d8d8b8a8835c8489d1da54a474951420d789c0be42973d3a459b52d93e682abd4ea4785be1a0a83c8144241217f6054df6487649e0a67c9bf94fdba9a833d388280ba763e65287b7f55989bc7c2a4dd125b3b0b", 0xb9, 0x101, 0x0, 0x3}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x1, r9, &(0x7f0000000800)="5dd28187c5f9cd320ab6a077ee58ea23c85315df607d6ca04e4f700dc9d24dd507e63563d831be40464f4af46505b683fd158d4eb6ceedf48ad3e041afb9d05d4e4102f0214486fd41d03fb224f1a4b9d05255e58ea174492e8a1090e6ecaa94b6f2f79d48c5317876cae73735778b0a5858cde21c96aea3add046ebbee3f803a8e1ee20c7edc296b1c07beebe0af95228ef6d9a76d1c61781d98e326406da6fdc177e31736403c989e2c658dcc840c83491e34a57dcf487079f01aca9ba1ebf4435882b5fe16d3404ec658cb53f756bf7c50c4abdb46663f5779fabd07be30ea63c0224", 0xe4, 0x0, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0xa8ee, r0, &(0x7f0000000940)="36d495299c1c1a982efd7c1ed3295068e9151a53fa1ab2123cb8e4a21fa88749fd12e843e984345d48cc0193b2b970d496492b7c2b3904af2d0fa59eaa4655ac31904983631cabe1b6d6e4387fb02ff3cfd99adb360958355e9bb23e78a8e8416dffcdfbcb989183897e72377c8cf14dbdd2b36a60aee67d3eb3cb55", 0x7c, 0x3, 0x0, 0x1}])
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x35f, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x4e44, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000146000/0x4000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
io_uring_enter(r4, 0x80e, 0xbb, 0x1, &(0x7f0000000100)={[0xb0f6]}, 0x8) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x74000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x24f, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000002)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x7a000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000002000)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x255, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x38f, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0) (async)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="f5a53a1c79783a4780f2379251e9092d92130d17163d29937e9f85414a46243df8c5838766d2a308228d64a11f0509104a7c8dc35e1cac6305fea07862d53b387666d41706865604a1afba4fd4adf7f517c85eca3ee33f", 0x57, 0x40080, 0x1, {0x0, r6}}, 0x0)
r7 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r8=>r7, {0x4}}, './file0/../file0\x00'}) (async)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f00000000c0)) (async)
io_submit(0x0, 0x6, &(0x7f0000000a00)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x1ff, 0xffffffffffffffff, &(0x7f0000000380)="16b9877bcd61c15be64f91b5315d145f2206a0ad71ec8f86deb26f247266112b64be2c8791f56757b489003a09db9c2a63d8d9f3e9210bd6439d0472bc7551a55f8d75d664d66e952be177994087904b9ca664ea", 0x54, 0x4, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x7, r7, &(0x7f0000000440)="9b002ae834cce069896c25bb06dcf6996800d757fe2b45bfa4096739c3ecd2e146ce2c33d3e557c89171fa278d58720b0d1ca791793d8a76a0919db27f6993b276b264f9b8c77ae471652ba0fbb1a87f790c81f7cdf1d6f540fd4522ee650ca03bb1440aa3e4e846a6a425c8c14ea65f2d829a5199273c5d438af30bf7b0564a47c4d03080a2759024972156ef79e5326868ab0258dbd9afe2b4c09efbf42bdff126ec1343abb4e9e91b706e721e0f56c4328e3f443c8388e44b1ee637cf726c5fd6c0809776ca9ca7f1551d494d230789b7168c48203114510af3c9cff1", 0xde, 0x62, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000580)="bf24a9174210535e1db6f7a72242127ad55a60c3763012a2a8a5429e1f04a71d444b77ec3c6d4d8c44c9f55a32af77e1ed1eaf22c1311998e0111ed881a2dd4666cc7f22bc8568f6fc3dc018c649001ad28313cfe4eda2c9aecea492c306407d47733b20776bf225f8fc427a0c8735c8690830dee23b3ce176e68e0c91bbe1979c70cee123c17b231fb61e9e1b03a865e9508eb6cd2bb358db1c87e05e37d54f45c4206262633d30d499b4daa7682ddfcf6392b342c91566f24d36fb1c0307602b1c1c562bc0916045b5b8e7ae1af5f8affd6f79", 0xd4, 0x7fffffffffffffff, 0x0, 0x2, r8}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x5, r7, &(0x7f0000000700)="6e98cdddbb2b1eb85a97a2bf0162e584a7bc40f4d5857089c91ff331ab48e41f65b53e60d59f59ba2f8a42a0e2c2abfbfdc841dede7cb406c806bfacef7a28c4392fe31b8e9f0a6949ad5f1de0f9f7e3cb775c11ddca2948e90107a47a10a5e35f281ec2916d8d8b8a8835c8489d1da54a474951420d789c0be42973d3a459b52d93e682abd4ea4785be1a0a83c8144241217f6054df6487649e0a67c9bf94fdba9a833d388280ba763e65287b7f55989bc7c2a4dd125b3b0b", 0xb9, 0x101, 0x0, 0x3}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x1, r9, &(0x7f0000000800)="5dd28187c5f9cd320ab6a077ee58ea23c85315df607d6ca04e4f700dc9d24dd507e63563d831be40464f4af46505b683fd158d4eb6ceedf48ad3e041afb9d05d4e4102f0214486fd41d03fb224f1a4b9d05255e58ea174492e8a1090e6ecaa94b6f2f79d48c5317876cae73735778b0a5858cde21c96aea3add046ebbee3f803a8e1ee20c7edc296b1c07beebe0af95228ef6d9a76d1c61781d98e326406da6fdc177e31736403c989e2c658dcc840c83491e34a57dcf487079f01aca9ba1ebf4435882b5fe16d3404ec658cb53f756bf7c50c4abdb46663f5779fabd07be30ea63c0224", 0xe4, 0x0, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0xa8ee, r0, &(0x7f0000000940)="36d495299c1c1a982efd7c1ed3295068e9151a53fa1ab2123cb8e4a21fa88749fd12e843e984345d48cc0193b2b970d496492b7c2b3904af2d0fa59eaa4655ac31904983631cabe1b6d6e4387fb02ff3cfd99adb360958355e9bb23e78a8e8416dffcdfbcb989183897e72377c8cf14dbdd2b36a60aee67d3eb3cb55", 0x7c, 0x3, 0x0, 0x1}])
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x81000000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000020000)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x3d2, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20094, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f00005f0000/0x4000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x1000, "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"}, &(0x7f0000000280)=0x1008)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = dup(0xffffffffffffffff)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000015c0)=ANY=[@ANYBLOB="110000000100000018006463413eeaa55a286a4538e4b25f66641ca51eec95a7c8233c309c93724a250a76d45cd4e8ac8ea5d38788d62e195c771551a9c33289d34afa64bbe97b5324099058e27ac6f76ea94aa69c3d5b0c08a1af9b670692403dbf87a206d79ec23d8bd491994bdac700e4e22e4f9cf4522f4bed5fbf95a400d2057b76ef5c130fe98d6ce7178144abcb843da983f12e70cba079461ec3c8e50956ca059f263cf8106cbeb829552be3cb3729560c28efb65630c44854d108132c3ec306c33230f5b4487643e3468233652d82aa604e5ec7bd454cc9aec986db00319c3c68dec090d61664b092f12bdfe9740fed2f945af0f44deb9db9c491ed060d8a2aa2f732a056b9efa1", @ANYRES32=<r6=>r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
io_uring_enter(r6, 0x7c25, 0x9c8e, 0x2, &(0x7f00000014c0)={[0xe0]}, 0x8)
getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f0000000380)=""/155, &(0x7f00000001c0)=0x9b)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x262, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x81ffffff, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000f0ff7f)

17:12:21 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="f5a53a1c79783a4780f2379251e9092d92130d17163d29937e9f85414a46243df8c5838766d2a308228d64a11f0509104a7c8dc35e1cac6305fea07862d53b387666d41706865604a1afba4fd4adf7f517c85eca3ee33f", 0x57, 0x40080, 0x1, {0x0, r6}}, 0x0)
r7 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r8=>r7, {0x4}}, './file0/../file0\x00'})
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f00000000c0))
io_submit(0x0, 0x6, &(0x7f0000000a00)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x1ff, 0xffffffffffffffff, &(0x7f0000000380)="16b9877bcd61c15be64f91b5315d145f2206a0ad71ec8f86deb26f247266112b64be2c8791f56757b489003a09db9c2a63d8d9f3e9210bd6439d0472bc7551a55f8d75d664d66e952be177994087904b9ca664ea", 0x54, 0x4, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x7, r7, &(0x7f0000000440)="9b002ae834cce069896c25bb06dcf6996800d757fe2b45bfa4096739c3ecd2e146ce2c33d3e557c89171fa278d58720b0d1ca791793d8a76a0919db27f6993b276b264f9b8c77ae471652ba0fbb1a87f790c81f7cdf1d6f540fd4522ee650ca03bb1440aa3e4e846a6a425c8c14ea65f2d829a5199273c5d438af30bf7b0564a47c4d03080a2759024972156ef79e5326868ab0258dbd9afe2b4c09efbf42bdff126ec1343abb4e9e91b706e721e0f56c4328e3f443c8388e44b1ee637cf726c5fd6c0809776ca9ca7f1551d494d230789b7168c48203114510af3c9cff1", 0xde, 0x62, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000580)="bf24a9174210535e1db6f7a72242127ad55a60c3763012a2a8a5429e1f04a71d444b77ec3c6d4d8c44c9f55a32af77e1ed1eaf22c1311998e0111ed881a2dd4666cc7f22bc8568f6fc3dc018c649001ad28313cfe4eda2c9aecea492c306407d47733b20776bf225f8fc427a0c8735c8690830dee23b3ce176e68e0c91bbe1979c70cee123c17b231fb61e9e1b03a865e9508eb6cd2bb358db1c87e05e37d54f45c4206262633d30d499b4daa7682ddfcf6392b342c91566f24d36fb1c0307602b1c1c562bc0916045b5b8e7ae1af5f8affd6f79", 0xd4, 0x7fffffffffffffff, 0x0, 0x2, r8}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x5, r7, &(0x7f0000000700)="6e98cdddbb2b1eb85a97a2bf0162e584a7bc40f4d5857089c91ff331ab48e41f65b53e60d59f59ba2f8a42a0e2c2abfbfdc841dede7cb406c806bfacef7a28c4392fe31b8e9f0a6949ad5f1de0f9f7e3cb775c11ddca2948e90107a47a10a5e35f281ec2916d8d8b8a8835c8489d1da54a474951420d789c0be42973d3a459b52d93e682abd4ea4785be1a0a83c8144241217f6054df6487649e0a67c9bf94fdba9a833d388280ba763e65287b7f55989bc7c2a4dd125b3b0b", 0xb9, 0x101, 0x0, 0x3}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x1, r9, &(0x7f0000000800)="5dd28187c5f9cd320ab6a077ee58ea23c85315df607d6ca04e4f700dc9d24dd507e63563d831be40464f4af46505b683fd158d4eb6ceedf48ad3e041afb9d05d4e4102f0214486fd41d03fb224f1a4b9d05255e58ea174492e8a1090e6ecaa94b6f2f79d48c5317876cae73735778b0a5858cde21c96aea3add046ebbee3f803a8e1ee20c7edc296b1c07beebe0af95228ef6d9a76d1c61781d98e326406da6fdc177e31736403c989e2c658dcc840c83491e34a57dcf487079f01aca9ba1ebf4435882b5fe16d3404ec658cb53f756bf7c50c4abdb46663f5779fabd07be30ea63c0224", 0xe4, 0x0, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0xa8ee, r0, &(0x7f0000000940)="36d495299c1c1a982efd7c1ed3295068e9151a53fa1ab2123cb8e4a21fa88749fd12e843e984345d48cc0193b2b970d496492b7c2b3904af2d0fa59eaa4655ac31904983631cabe1b6d6e4387fb02ff3cfd99adb360958355e9bb23e78a8e8416dffcdfbcb989183897e72377c8cf14dbdd2b36a60aee67d3eb3cb55", 0x7c, 0x3, 0x0, 0x1}])
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
syz_io_uring_submit(r3, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="f5a53a1c79783a4780f2379251e9092d92130d17163d29937e9f85414a46243df8c5838766d2a308228d64a11f0509104a7c8dc35e1cac6305fea07862d53b387666d41706865604a1afba4fd4adf7f517c85eca3ee33f", 0x57, 0x40080, 0x1, {0x0, r6}}, 0x0) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0/../file0\x00'}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f00000000c0)) (async)
io_submit(0x0, 0x6, &(0x7f0000000a00)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x1ff, 0xffffffffffffffff, &(0x7f0000000380)="16b9877bcd61c15be64f91b5315d145f2206a0ad71ec8f86deb26f247266112b64be2c8791f56757b489003a09db9c2a63d8d9f3e9210bd6439d0472bc7551a55f8d75d664d66e952be177994087904b9ca664ea", 0x54, 0x4, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x7, r7, &(0x7f0000000440)="9b002ae834cce069896c25bb06dcf6996800d757fe2b45bfa4096739c3ecd2e146ce2c33d3e557c89171fa278d58720b0d1ca791793d8a76a0919db27f6993b276b264f9b8c77ae471652ba0fbb1a87f790c81f7cdf1d6f540fd4522ee650ca03bb1440aa3e4e846a6a425c8c14ea65f2d829a5199273c5d438af30bf7b0564a47c4d03080a2759024972156ef79e5326868ab0258dbd9afe2b4c09efbf42bdff126ec1343abb4e9e91b706e721e0f56c4328e3f443c8388e44b1ee637cf726c5fd6c0809776ca9ca7f1551d494d230789b7168c48203114510af3c9cff1", 0xde, 0x62, 0x0, 0x1}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x7, r5, &(0x7f0000000580)="bf24a9174210535e1db6f7a72242127ad55a60c3763012a2a8a5429e1f04a71d444b77ec3c6d4d8c44c9f55a32af77e1ed1eaf22c1311998e0111ed881a2dd4666cc7f22bc8568f6fc3dc018c649001ad28313cfe4eda2c9aecea492c306407d47733b20776bf225f8fc427a0c8735c8690830dee23b3ce176e68e0c91bbe1979c70cee123c17b231fb61e9e1b03a865e9508eb6cd2bb358db1c87e05e37d54f45c4206262633d30d499b4daa7682ddfcf6392b342c91566f24d36fb1c0307602b1c1c562bc0916045b5b8e7ae1af5f8affd6f79", 0xd4, 0x7fffffffffffffff, 0x0, 0x2, r8}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x3, 0x5, r7, &(0x7f0000000700)="6e98cdddbb2b1eb85a97a2bf0162e584a7bc40f4d5857089c91ff331ab48e41f65b53e60d59f59ba2f8a42a0e2c2abfbfdc841dede7cb406c806bfacef7a28c4392fe31b8e9f0a6949ad5f1de0f9f7e3cb775c11ddca2948e90107a47a10a5e35f281ec2916d8d8b8a8835c8489d1da54a474951420d789c0be42973d3a459b52d93e682abd4ea4785be1a0a83c8144241217f6054df6487649e0a67c9bf94fdba9a833d388280ba763e65287b7f55989bc7c2a4dd125b3b0b", 0xb9, 0x101, 0x0, 0x3}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x8, 0x1, r9, &(0x7f0000000800)="5dd28187c5f9cd320ab6a077ee58ea23c85315df607d6ca04e4f700dc9d24dd507e63563d831be40464f4af46505b683fd158d4eb6ceedf48ad3e041afb9d05d4e4102f0214486fd41d03fb224f1a4b9d05255e58ea174492e8a1090e6ecaa94b6f2f79d48c5317876cae73735778b0a5858cde21c96aea3add046ebbee3f803a8e1ee20c7edc296b1c07beebe0af95228ef6d9a76d1c61781d98e326406da6fdc177e31736403c989e2c658dcc840c83491e34a57dcf487079f01aca9ba1ebf4435882b5fe16d3404ec658cb53f756bf7c50c4abdb46663f5779fabd07be30ea63c0224", 0xe4, 0x0, 0x0, 0x2}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x5, 0xa8ee, r0, &(0x7f0000000940)="36d495299c1c1a982efd7c1ed3295068e9151a53fa1ab2123cb8e4a21fa88749fd12e843e984345d48cc0193b2b970d496492b7c2b3904af2d0fa59eaa4655ac31904983631cabe1b6d6e4387fb02ff3cfd99adb360958355e9bb23e78a8e8416dffcdfbcb989183897e72377c8cf14dbdd2b36a60aee67d3eb3cb55", 0x7c, 0x3, 0x0, 0x1}]) (async)
bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x3ea, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x2cd, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x88470000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000001000000)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x3f2, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x2d5, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x88480000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20094, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f00005f0000/0x4000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x1000, "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"}, &(0x7f0000000280)=0x1008)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r4 = dup(0xffffffffffffffff)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000015c0)=ANY=[@ANYBLOB="110000000100000018006463413eeaa55a286a4538e4b25f66641ca51eec95a7c8233c309c93724a250a76d45cd4e8ac8ea5d38788d62e195c771551a9c33289d34afa64bbe97b5324099058e27ac6f76ea94aa69c3d5b0c08a1af9b670692403dbf87a206d79ec23d8bd491994bdac700e4e22e4f9cf4522f4bed5fbf95a400d2057b76ef5c130fe98d6ce7178144abcb843da983f12e70cba079461ec3c8e50956ca059f263cf8106cbeb829552be3cb3729560c28efb65630c44854d108132c3ec306c33230f5b4487643e3468233652d82aa604e5ec7bd454cc9aec986db00319c3c68dec090d61664b092f12bdfe9740fed2f945af0f44deb9db9c491ed060d8a2aa2f732a056b9efa1", @ANYRES32=<r6=>r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00'])
io_uring_enter(r6, 0x7c25, 0x9c8e, 0x2, &(0x7f00000014c0)={[0xe0]}, 0x8)
getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f0000000380)=""/155, &(0x7f00000001c0)=0x9b)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20094, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f00005f0000/0x4000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x1000, "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"}, &(0x7f0000000280)=0x1008) (async)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000015c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
io_uring_enter(r6, 0x7c25, 0x9c8e, 0x2, &(0x7f00000014c0)={[0xe0]}, 0x8) (async)
getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f0000000380)=""/155, &(0x7f00000001c0)=0x9b) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) (async)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000002000000)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x3f4, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1532.578494][   T24] audit: type=1400 audit(1650820341.353:668): avc:  denied  { getopt } for  pid=15573 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x2e1, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x88a8ffff, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000020000000)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x3f6, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20094, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f00005f0000/0x4000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000440)={0x0, 0x1000, "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"}, &(0x7f0000000280)=0x1008) (async)
getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080), 0x10) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
r4 = dup(0xffffffffffffffff)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f00000015c0)=ANY=[@ANYBLOB="110000000100000018006463413eeaa55a286a4538e4b25f66641ca51eec95a7c8233c309c93724a250a76d45cd4e8ac8ea5d38788d62e195c771551a9c33289d34afa64bbe97b5324099058e27ac6f76ea94aa69c3d5b0c08a1af9b670692403dbf87a206d79ec23d8bd491994bdac700e4e22e4f9cf4522f4bed5fbf95a400d2057b76ef5c130fe98d6ce7178144abcb843da983f12e70cba079461ec3c8e50956ca059f263cf8106cbeb829552be3cb3729560c28efb65630c44854d108132c3ec306c33230f5b4487643e3468233652d82aa604e5ec7bd454cc9aec986db00319c3c68dec090d61664b092f12bdfe9740fed2f945af0f44deb9db9c491ed060d8a2aa2f732a056b9efa1", @ANYRES32=<r6=>r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async)
io_uring_enter(r6, 0x7c25, 0x9c8e, 0x2, &(0x7f00000014c0)={[0xe0]}, 0x8) (async)
getsockopt$sock_buf(r5, 0x1, 0x3d, &(0x7f0000000380)=""/155, &(0x7f00000001c0)=0x9b) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x3fc, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x30000007ffff000)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x300, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x9effffff, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 2:
r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x2, 0x2, 0x0, 0x3455, 0x80, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x784, 0x2, @perf_config_ext={0x4, 0x7421aab9}, 0xc0, 0x2, 0x7, 0x5, 0x7c8, 0xffffff0a, 0x6, 0x0, 0x3f, 0x0, 0x37}, r0, 0xc, 0xffffffffffffffff, 0x2)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r4 = socket$inet(0x2, 0x4, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r5 = dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="4aecc42e933c335f457283cec4f0054666", 0x11}, {&(0x7f0000000380)="4ab22f25478cc5b2170e72ba422427f2f9ff642c93de944601a26586103dd2b11901e5b297cc1f3cb410135b62da4fa54fbdc797f4f02739af7b19c5d5dc5a044df84b1da63657f0c54cac10bd97bbb2af0594cdc7b1e232b89ed2c786dc30b38d5cf1e95b", 0x65}, {&(0x7f0000000400)="5db1efc46d6dd2d724af7c9a9726c8d3bd5bfdf43ba0d419610bb83f872f4f5376354fd41bc5e309d9d3229fe22da115843ce7651f83b31263276681a80899854c35fecccc51798e54b581b267c44b6487091d0bc8111f85eef74d48e2a30d2831f72d103353f578fbe1b1c61d7c91c3a29e18d0437b6280eb5f258874f5850d9fbbc26354fe47f594cdc9b47926f9a0e22ea426ca90980539c437ef4a7da80b4185b7820b8cbff70909a56170ca78baef8b189c32aa6551f6f14069c1cb0e4791e4", 0xc2}], 0x3, &(0x7f0000000540)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x29, 0x0, 0x0, [0x6, 0xfffffc01, 0x20]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x66, 0x0, 0x0, [0x2000]}]}}}], 0x30}, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x3fd, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 5:
r0 = io_uring_setup(0x5903, &(0x7f0000000380)={0x0, 0x2a8e, 0x4, 0x0, 0x2da})
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f000014b000/0x2000)=nil, 0x2000, 0x1000019, 0x110, r4, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f00000000c0))
syz_io_uring_submit(r6, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd=r7, 0x60, &(0x7f0000000040)=""/34, 0x22, 0x10, 0x1}, 0x7)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x1000001, 0x20010, r4, 0x0)
syz_io_uring_submit(r8, r3, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, &(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', 0x1, 0x400, 0x0, {0x0, r5}}, 0x801)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x1, 0x0, @fd=r9, 0x0, 0x0}, 0xfff)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xda430000, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x304, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x3fe, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xeaffffff, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 5:
r0 = io_uring_setup(0x5903, &(0x7f0000000380)={0x0, 0x2a8e, 0x4, 0x0, 0x2da})
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f000014b000/0x2000)=nil, 0x2000, 0x1000019, 0x110, r4, 0x0) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f00000000c0)) (async)
syz_io_uring_submit(r6, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd=r7, 0x60, &(0x7f0000000040)=""/34, 0x22, 0x10, 0x1}, 0x7) (async)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x1000001, 0x20010, r4, 0x0)
syz_io_uring_submit(r8, r3, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, &(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', 0x1, 0x400, 0x0, {0x0, r5}}, 0x801) (async)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x1, 0x0, @fd=r9, 0x0, 0x0}, 0xfff) (async)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x322, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x500, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xefffffff, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001380)={{0x1, 0x1, 0x18, <r7=>r3}, './file0/../file0\x00'})
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, r7, &(0x7f00000013c0), 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0xe4)
syz_io_uring_setup(0x6421, &(0x7f0000000100)={0x0, 0x4462, 0x1, 0x3, 0x360}, &(0x7f00005ef000/0x4000)=nil, &(0x7f00005f0000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=<r8=>0x0)
r9 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r10=>0x0, &(0x7f0000000040)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
r13 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r9, 0x10000000)
syz_io_uring_submit(r10, r13, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r12}}, 0x1)
syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x8, 0x2, &(0x7f0000000380)="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", 0x2, 0x0, 0x0, {0x0, r12}}, 0x3)

17:12:21 executing program 2:
r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x2, 0x2, 0x0, 0x3455, 0x80, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x784, 0x2, @perf_config_ext={0x4, 0x7421aab9}, 0xc0, 0x2, 0x7, 0x5, 0x7c8, 0xffffff0a, 0x6, 0x0, 0x3f, 0x0, 0x37}, r0, 0xc, 0xffffffffffffffff, 0x2)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r4 = socket$inet(0x2, 0x4, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r5 = dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="4aecc42e933c335f457283cec4f0054666", 0x11}, {&(0x7f0000000380)="4ab22f25478cc5b2170e72ba422427f2f9ff642c93de944601a26586103dd2b11901e5b297cc1f3cb410135b62da4fa54fbdc797f4f02739af7b19c5d5dc5a044df84b1da63657f0c54cac10bd97bbb2af0594cdc7b1e232b89ed2c786dc30b38d5cf1e95b", 0x65}, {&(0x7f0000000400)="5db1efc46d6dd2d724af7c9a9726c8d3bd5bfdf43ba0d419610bb83f872f4f5376354fd41bc5e309d9d3229fe22da115843ce7651f83b31263276681a80899854c35fecccc51798e54b581b267c44b6487091d0bc8111f85eef74d48e2a30d2831f72d103353f578fbe1b1c61d7c91c3a29e18d0437b6280eb5f258874f5850d9fbbc26354fe47f594cdc9b47926f9a0e22ea426ca90980539c437ef4a7da80b4185b7820b8cbff70909a56170ca78baef8b189c32aa6551f6f14069c1cb0e4791e4", 0xc2}], 0x3, &(0x7f0000000540)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x29, 0x0, 0x0, [0x6, 0xfffffc01, 0x20]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x66, 0x0, 0x0, [0x2000]}]}}}], 0x30}, 0x0)

17:12:21 executing program 5:
r0 = io_uring_setup(0x5903, &(0x7f0000000380)={0x0, 0x2a8e, 0x4, 0x0, 0x2da})
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async, rerun: 32)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 32)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f000014b000/0x2000)=nil, 0x2000, 0x1000019, 0x110, r4, 0x0) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f00000000c0)) (async)
syz_io_uring_submit(r6, r3, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x6000, @fd=r7, 0x60, &(0x7f0000000040)=""/34, 0x22, 0x10, 0x1}, 0x7) (async)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000148000/0x2000)=nil, 0x2000, 0x1000001, 0x20010, r4, 0x0)
syz_io_uring_submit(r8, r3, &(0x7f00000000c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, r4, &(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', 0x1, 0x400, 0x0, {0x0, r5}}, 0x801)
r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x1, 0x0, @fd=r9, 0x0, 0x0}, 0xfff)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x35f, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x600, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xf0ffffff, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x38f, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x700, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xfeffffff, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x3ea, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 2:
r0 = perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x2, 0x2, 0x2, 0x0, 0x3455, 0x80, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x784, 0x2, @perf_config_ext={0x4, 0x7421aab9}, 0xc0, 0x2, 0x7, 0x5, 0x7c8, 0xffffff0a, 0x6, 0x0, 0x3f, 0x0, 0x37}, r0, 0xc, 0xffffffffffffffff, 0x2) (async)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r4 = socket$inet(0x2, 0x4, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
r5 = dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
sendmsg$inet(r5, &(0x7f0000000580)={&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000280)="4aecc42e933c335f457283cec4f0054666", 0x11}, {&(0x7f0000000380)="4ab22f25478cc5b2170e72ba422427f2f9ff642c93de944601a26586103dd2b11901e5b297cc1f3cb410135b62da4fa54fbdc797f4f02739af7b19c5d5dc5a044df84b1da63657f0c54cac10bd97bbb2af0594cdc7b1e232b89ed2c786dc30b38d5cf1e95b", 0x65}, {&(0x7f0000000400)="5db1efc46d6dd2d724af7c9a9726c8d3bd5bfdf43ba0d419610bb83f872f4f5376354fd41bc5e309d9d3229fe22da115843ce7651f83b31263276681a80899854c35fecccc51798e54b581b267c44b6487091d0bc8111f85eef74d48e2a30d2831f72d103353f578fbe1b1c61d7c91c3a29e18d0437b6280eb5f258874f5850d9fbbc26354fe47f594cdc9b47926f9a0e22ea426ca90980539c437ef4a7da80b4185b7820b8cbff70909a56170ca78baef8b189c32aa6551f6f14069c1cb0e4791e4", 0xc2}], 0x3, &(0x7f0000000540)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x29, 0x0, 0x0, [0x6, 0xfffffc01, 0x20]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x66, 0x0, 0x0, [0x2000]}]}}}], 0x30}, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x900, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0) (async)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async, rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001380)={{0x1, 0x1, 0x18, <r7=>r3}, './file0/../file0\x00'}) (rerun: 64)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, r7, &(0x7f00000013c0), 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0xe4)
syz_io_uring_setup(0x6421, &(0x7f0000000100)={0x0, 0x4462, 0x1, 0x3, 0x360}, &(0x7f00005ef000/0x4000)=nil, &(0x7f00005f0000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=<r8=>0x0)
r9 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r10=>0x0, &(0x7f0000000040)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) (async)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
r13 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r9, 0x10000000)
syz_io_uring_submit(r10, r13, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r12}}, 0x1) (async)
syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x8, 0x2, &(0x7f0000000380)="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", 0x2, 0x0, 0x0, {0x0, r12}}, 0x3)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xffffa888, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xa00, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000100)=0x4, 0x4)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@generic={0x5, "2a65ea3cfccf4e68900d3aad8142e51ba942fd4387a528b27944d40de748163d6075fbcc1bf2b374e9205a38bb1e8cb6e48311bf03ca6eb68051f52cd2692fbe591c5ccb8570bfdd423eb0cc9fb14e8285b19ecdcc25cb5340f6908bb2df73ea03676cddbf7bb66632d7990a60f894ad260993691cb4fc1f5e15ca27b54d"}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xcfc6, 0x0, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x3ee, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xb00, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0xa}}, 0x20)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
syz_io_uring_setup(0x616b, &(0x7f0000000140)={0x0, 0x74fb, 0x2, 0x1, 0x17b, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014b000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x5, 0x4004, @fd=r0, 0x6, &(0x7f0000000240)="14ee3bd943d8944a4deb9b425a650ca65adc170a3b803679a63a6fbfc22a05a778860a75058e6e5544a945d3fd27c87b7ef2aa5f6a5521ff3512fc90e3", 0x3d, 0x5}, 0x6)
syz_io_uring_setup(0x53ed, &(0x7f0000000380)={0x0, 0xd209, 0x20, 0x0, 0x14f, 0x0, r0}, &(0x7f0000149000/0x1000)=nil, &(0x7f000014c000/0x1000)=nil, &(0x7f0000000400)=<r5=>0x0, &(0x7f0000000440))
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x480200, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f00000000c0))
r8 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
r12 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
syz_io_uring_submit(r9, r12, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1)
syz_io_uring_submit(r5, r4, &(0x7f0000000500)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r6, &(0x7f00000004c0)={0x20000000}, r7, 0x1, 0x0, 0x0, {0x0, r11}}, 0x1)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xffffff7f, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0xa}}, 0x20) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)
syz_io_uring_setup(0x616b, &(0x7f0000000140)={0x0, 0x74fb, 0x2, 0x1, 0x17b, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014b000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x5, 0x4004, @fd=r0, 0x6, &(0x7f0000000240)="14ee3bd943d8944a4deb9b425a650ca65adc170a3b803679a63a6fbfc22a05a778860a75058e6e5544a945d3fd27c87b7ef2aa5f6a5521ff3512fc90e3", 0x3d, 0x5}, 0x6) (async)
syz_io_uring_setup(0x53ed, &(0x7f0000000380)={0x0, 0xd209, 0x20, 0x0, 0x14f, 0x0, r0}, &(0x7f0000149000/0x1000)=nil, &(0x7f000014c000/0x1000)=nil, &(0x7f0000000400)=<r5=>0x0, &(0x7f0000000440)) (async)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x480200, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f00000000c0)) (async)
r8 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async)
r12 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
syz_io_uring_submit(r9, r12, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1) (async)
syz_io_uring_submit(r5, r4, &(0x7f0000000500)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r6, &(0x7f00000004c0)={0x20000000}, r7, 0x1, 0x0, 0x0, {0x0, r11}}, 0x1)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xc00, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xffffff81, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async, rerun: 32)
r3 = socket$inet(0x2, 0x6, 0x0) (rerun: 32)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000100)=0x4, 0x4) (async)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@generic={0x5, "2a65ea3cfccf4e68900d3aad8142e51ba942fd4387a528b27944d40de748163d6075fbcc1bf2b374e9205a38bb1e8cb6e48311bf03ca6eb68051f52cd2692fbe591c5ccb8570bfdd423eb0cc9fb14e8285b19ecdcc25cb5340f6908bb2df73ea03676cddbf7bb66632d7990a60f894ad260993691cb4fc1f5e15ca27b54d"}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xcfc6, 0x0, 0x0, 0x0) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32)
dup(0xffffffffffffffff) (async, rerun: 32)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:21 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0) (async)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001380)={{0x1, 0x1, 0x18, <r7=>r3}, './file0/../file0\x00'})
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, r7, &(0x7f00000013c0), 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0xe4) (async)
syz_io_uring_setup(0x6421, &(0x7f0000000100)={0x0, 0x4462, 0x1, 0x3, 0x360}, &(0x7f00005ef000/0x4000)=nil, &(0x7f00005f0000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000001c0)=<r8=>0x0)
r9 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r10=>0x0, &(0x7f0000000040)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) (async)
r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) (async)
r13 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r9, 0x10000000)
syz_io_uring_submit(r10, r13, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r12}}, 0x1) (async)
syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x8, 0x2, &(0x7f0000000380)="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", 0x2, 0x0, 0x0, {0x0, r12}}, 0x3)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x3f2, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xd00, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0xa}}, 0x20)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)
syz_io_uring_setup(0x616b, &(0x7f0000000140)={0x0, 0x74fb, 0x2, 0x1, 0x17b, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000014b000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x5, 0x4004, @fd=r0, 0x6, &(0x7f0000000240)="14ee3bd943d8944a4deb9b425a650ca65adc170a3b803679a63a6fbfc22a05a778860a75058e6e5544a945d3fd27c87b7ef2aa5f6a5521ff3512fc90e3", 0x3d, 0x5}, 0x6) (async)
syz_io_uring_setup(0x53ed, &(0x7f0000000380)={0x0, 0xd209, 0x20, 0x0, 0x14f, 0x0, r0}, &(0x7f0000149000/0x1000)=nil, &(0x7f000014c000/0x1000)=nil, &(0x7f0000000400)=<r5=>0x0, &(0x7f0000000440)) (async)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x480200, 0x0) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f00000000c0)) (async)
r8 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) (async)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
r12 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
syz_io_uring_submit(r9, r12, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1) (async)
syz_io_uring_submit(r5, r4, &(0x7f0000000500)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, r6, &(0x7f00000004c0)={0x20000000}, r7, 0x1, 0x0, 0x0, {0x0, r11}}, 0x1)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xffffff9e, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000100)=0x4, 0x4)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@generic={0x5, "2a65ea3cfccf4e68900d3aad8142e51ba942fd4387a528b27944d40de748163d6075fbcc1bf2b374e9205a38bb1e8cb6e48311bf03ca6eb68051f52cd2692fbe591c5ccb8570bfdd423eb0cc9fb14e8285b19ecdcc25cb5340f6908bb2df73ea03676cddbf7bb66632d7990a60f894ad260993691cb4fc1f5e15ca27b54d"}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0)
io_uring_enter(r0, 0x45f5, 0xcfc6, 0x0, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000148000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000100)=0x4, 0x4) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@generic={0x5, "2a65ea3cfccf4e68900d3aad8142e51ba942fd4387a528b27944d40de748163d6075fbcc1bf2b374e9205a38bb1e8cb6e48311bf03ca6eb68051f52cd2692fbe591c5ccb8570bfdd423eb0cc9fb14e8285b19ecdcc25cb5340f6908bb2df73ea03676cddbf7bb66632d7990a60f894ad260993691cb4fc1f5e15ca27b54d"}, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0xcfc6, 0x0, 0x0, 0x0) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x3f4, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:21 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xe00, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:21 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xffffffea, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:21 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x3f6, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x1100, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x3f8, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r5, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0)=0x81, r5, 0x0, 0x0, 0x1}}, 0x20)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x200, 0x6000, 0x1}, 0x81)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x4}}, 0x20)
syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r3, 0x0, 0x0}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0)
io_uring_enter(r9, 0x5881, 0x2f92, 0x1, &(0x7f0000000380)={[0x1]}, 0x8)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xffffffef, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x1200, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x3f9, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r7 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
r10 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r4, r9, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x20001, 0x42, 0x4}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}, 0x3)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r11=>r7, @ANYBLOB="0000000000000000000000000000000031e9be0c1d9ffbc21e49dea2af3ebd00ad1dc80e49121b33be8f8b0000009a2e01137762d96b425b87e18fbb46337fe04d76e13875c40b86692faf259215078e4d747cd5a208aff76542e3ce4ab09356ad9fcec656161c9135d6bc4cd2a7bd499b1388aed4d2fc0f1f8ac8c7ac16905ef88c93f5af7b30b9fe25092b394fa554274a3426aa36ed1d0c58c45a779869ef11da1429c5ca61e06b7b13246867d0847be63a569980d3dac3eead72485b706e5ee367197599a67a34f928d4"])
io_uring_enter(r11, 0x2e4e, 0x60d5, 0x3, &(0x7f0000000380)={[0x1]}, 0x8)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x1801, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xfffffff0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r5, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0)=0x81, r5, 0x0, 0x0, 0x1}}, 0x20)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x200, 0x6000, 0x1}, 0x81)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x4}}, 0x20)
syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r3, 0x0, 0x0}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0)
io_uring_enter(r9, 0x5881, 0x2f92, 0x1, &(0x7f0000000380)={[0x1]}, 0x8)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) (async)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5}}, 0x10) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r5, 0x0, 0x2, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0)=0x81, r5, 0x0, 0x0, 0x1}}, 0x20) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x200, 0x6000, 0x1}, 0x81) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x4}}, 0x20) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r3, 0x0, 0x0}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$binfmt_script(r9, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) (async)
io_uring_enter(r9, 0x5881, 0x2f92, 0x1, &(0x7f0000000380)={[0x1]}, 0x8) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x3fc, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x2000, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0xfffffffe, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r7 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
r10 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r4, r9, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x20001, 0x42, 0x4}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}, 0x3)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r11=>r7, @ANYBLOB="0000000000000000000000000000000031e9be0c1d9ffbc21e49dea2af3ebd00ad1dc80e49121b33be8f8b0000009a2e01137762d96b425b87e18fbb46337fe04d76e13875c40b86692faf259215078e4d747cd5a208aff76542e3ce4ab09356ad9fcec656161c9135d6bc4cd2a7bd499b1388aed4d2fc0f1f8ac8c7ac16905ef88c93f5af7b30b9fe25092b394fa554274a3426aa36ed1d0c58c45a779869ef11da1429c5ca61e06b7b13246867d0847be63a569980d3dac3eead72485b706e5ee367197599a67a34f928d4"])
io_uring_enter(r11, 0x2e4e, 0x60d5, 0x3, &(0x7f0000000380)={[0x1]}, 0x8)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r4, r9, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x20001, 0x42, 0x4}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}, 0x3) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="0000000000000000000000000000000031e9be0c1d9ffbc21e49dea2af3ebd00ad1dc80e49121b33be8f8b0000009a2e01137762d96b425b87e18fbb46337fe04d76e13875c40b86692faf259215078e4d747cd5a208aff76542e3ce4ab09356ad9fcec656161c9135d6bc4cd2a7bd499b1388aed4d2fc0f1f8ac8c7ac16905ef88c93f5af7b30b9fe25092b394fa554274a3426aa36ed1d0c58c45a779869ef11da1429c5ca61e06b7b13246867d0847be63a569980d3dac3eead72485b706e5ee367197599a67a34f928d4"]) (async)
io_uring_enter(r11, 0x2e4e, 0x60d5, 0x3, &(0x7f0000000380)={[0x1]}, 0x8) (async)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x3fd, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r5, 0x0, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0)=0x81, r5, 0x0, 0x0, 0x1}}, 0x20)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x200, 0x6000, 0x1}, 0x81)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x4}}, 0x20)
syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r3, 0x0, 0x0}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0)
io_uring_enter(r9, 0x5881, 0x2f92, 0x1, &(0x7f0000000380)={[0x1]}, 0x8)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) (async)
write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r5}}, 0x10) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r5, 0x0, 0x2, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000003c0)=0x81, r5, 0x0, 0x0, 0x1}}, 0x20) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x200, 0x6000, 0x1}, 0x81) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x111, 0x4}}, 0x20) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r3, 0x0, 0x0}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$binfmt_script(r9, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r9, 0x0) (async)
io_uring_enter(r9, 0x5881, 0x2f92, 0x1, &(0x7f0000000380)={[0x1]}, 0x8) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)

17:12:22 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x2201, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0xa, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x3fe, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={<r5=>0x0})
ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r6=>r0, {0x19b}}, './file0/../file0/file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000480)={r5, 0x2, r6, 0x4})
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={<r8=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0)=<r10=>0x0)
r11 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r9, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r0, 0x6, 0x0, 0x1, 0x1}, 0x791c)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r8}}, 0x18)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x1}}, 0x20)

17:12:22 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0) (async)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
r7 = syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0) (async)
r10 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r10, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r8, r9, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r4, r9, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)={0x20001, 0x42, 0x4}, &(0x7f0000000040)='./file0\x00', 0x18, 0x0, 0x12345}, 0x3) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r11=>r7, @ANYBLOB="0000000000000000000000000000000031e9be0c1d9ffbc21e49dea2af3ebd00ad1dc80e49121b33be8f8b0000009a2e01137762d96b425b87e18fbb46337fe04d76e13875c40b86692faf259215078e4d747cd5a208aff76542e3ce4ab09356ad9fcec656161c9135d6bc4cd2a7bd499b1388aed4d2fc0f1f8ac8c7ac16905ef88c93f5af7b30b9fe25092b394fa554274a3426aa36ed1d0c58c45a779869ef11da1429c5ca61e06b7b13246867d0847be63a569980d3dac3eead72485b706e5ee367197599a67a34f928d4"]) (async)
io_uring_enter(r11, 0x2e4e, 0x60d5, 0x3, &(0x7f0000000380)={[0x1]}, 0x8)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0xf, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x403, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0x1}, 0x0)
setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000000)=0xa31e, 0x4)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x2203, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x10, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x2500, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async, rerun: 32)
r3 = socket$inet(0x2, 0x6, 0x0) (rerun: 32)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async, rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (rerun: 32)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async, rerun: 32)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={<r5=>0x0}) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r6=>r0, {0x19b}}, './file0/../file0/file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000480)={r5, 0x2, r6, 0x4}) (async)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={<r8=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0)=<r10=>0x0) (async, rerun: 32)
r11 = socket$inet_tcp(0x2, 0x3, 0x6) (rerun: 32)
bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async, rerun: 32)
syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async, rerun: 32)
syz_io_uring_submit(r9, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r0, 0x6, 0x0, 0x1, 0x1}, 0x791c) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r8}}, 0x18) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async, rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x1}}, 0x20) (rerun: 32)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x700, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0x1}, 0x0) (async)
setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000000)=0xa31e, 0x4) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x2900, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x25, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xc00, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x2c00, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0x1}, 0x0)
setsockopt$inet_int(r3, 0x0, 0x5, &(0x7f0000000000)=0xa31e, 0x4) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x1200, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x3400, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1533.673735][T15920] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'.
17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x1801, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={<r5=>0x0}) (async)
ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000440)={{0x1, 0x1, 0x18, <r6=>r0, {0x19b}}, './file0/../file0/file0\x00'})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000480)={r5, 0x2, r6, 0x4}) (async)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
pipe(&(0x7f0000000140)={<r7=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0)={<r8=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r9=>0x0, &(0x7f00000000c0)=<r10=>0x0)
r11 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r11, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r9, r10, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r9, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r0, 0x6, 0x0, 0x1, 0x1}, 0x791c)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r8}}, 0x18)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x1}}, 0x20)

17:12:22 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0xc0, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xbed, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffd)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r6 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x4800, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x4c00, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x2201, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x7f}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, {0xa, 0x4e24, 0x9, @loopback}, 0xffffffffffffffff, 0x10001}}, 0x48)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0xec0, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x2203, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x4f02, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x7f}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, {0xa, 0x4e24, 0x9, @loopback}, 0xffffffffffffffff, 0x10001}}, 0x48)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x33fe0, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x2900, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x5502, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, 0x7f}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, {0xa, 0x4e24, 0x9, @loopback}, 0xffffffffffffffff, 0x10001}}, 0x48)

17:12:22 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0) (async)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xbed, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffd) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r6 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x7ffff000, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000040)=0x400, 0x0, 0x4)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x1}}, './file0\x00'})
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x7, 0x7, "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", 0x7, 0xf7, 0x50, 0x4, 0x7, 0x7, 0x40, 0x1}, r5}}, 0x120)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x3400, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
syz_io_uring_setup(0x56c, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xbed, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffd)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r6 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0xfffffdef, 0x30, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000040)=0x400, 0x0, 0x4)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x1}}, './file0\x00'}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x7, 0x7, "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", 0x7, 0xf7, 0x50, 0x4, 0x7, 0x7, 0x40, 0x1}, r5}}, 0x120) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x5f03, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) (async)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0xa, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x6000, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x4f02, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x10c, &(0x7f0000000040)=0x400, 0x0, 0x4) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>r3, {0x1}}, './file0\x00'}) (async, rerun: 64)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20) (rerun: 64)
write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000380)={0x6, 0x118, 0xfa00, {{0x7, 0x7, "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", 0x7, 0xf7, 0x50, 0x4, 0x7, 0x7, 0x40, 0x1}, r5}}, 0x120)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

17:12:22 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0))
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x8, 0x81, 0x5, 0x1f, 0x8, "ad38f119e1ce27246146b59ffc20c60947d55c"})
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r4 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0)
r5 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000)
syz_io_uring_submit(r6, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r8}}, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x8)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x5502, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000148000/0x4000)=nil, 0x4000, 0x300000a, 0x1010, r0, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f00000000c0)={0x100, 0x0, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x12345}, 0x800)

17:12:22 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x6201, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:22 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x10, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1534.139881][T16014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=16014 comm=syz-executor.3
17:12:22 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000148000/0x4000)=nil, 0x4000, 0x300000a, 0x1010, r0, 0x0)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f00000000c0)={0x100, 0x0, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x12345}, 0x800)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000148000/0x4000)=nil, 0x4000, 0x300000a, 0x1010, r0, 0x0) (async)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) (async)
syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f00000000c0)={0x100, 0x0, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x12345}, 0x800) (async)

17:12:22 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x5f03, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1534.199562][T16032] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'.
17:12:23 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005f1000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:23 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x6202, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:23 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x6201, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:23 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x11, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:23 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000148000/0x4000)=nil, 0x4000, 0x300000a, 0x1010, r0, 0x0) (async)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r5, &(0x7f00000000c0)={0x100, 0x0, 0x14}, &(0x7f0000000140)='./file0\x00', 0x18, 0x0, 0x12345}, 0x800)

[ 1534.343608][T16054] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'.
17:12:23 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)) (async)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x8, 0x81, 0x5, 0x1f, 0x8, "ad38f119e1ce27246146b59ffc20c60947d55c"})
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r4 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
r5 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) (async)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000)
syz_io_uring_submit(r6, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r8}}, 0x1) (async, rerun: 32)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x8) (async, rerun: 32)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:23 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x6800, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:23 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x6202, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:23 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

17:12:23 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x12, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:23 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005f1000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005f1000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000000)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:23 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x6c00, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:23 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x8800, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:23 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x7400, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:23 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0))
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x8, 0x81, 0x5, 0x1f, 0x8, "ad38f119e1ce27246146b59ffc20c60947d55c"})
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r4 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
r5 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) (async)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) (async)
r9 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r5, 0x10000000)
syz_io_uring_submit(r6, r9, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r8}}, 0x1) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0x8) (async)
io_uring_enter(r1, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:23 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x13, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:23 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x8f03, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1534.671943][T16078] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'.
17:12:23 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x7a00, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:23 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x9a00, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:23 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x14, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1534.739729][T16101] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'.
17:12:24 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0) (async)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

17:12:24 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xae00, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:24 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x8800, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:24 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005f1000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:24 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x15, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:24 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1344a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$inet(0x2, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r5 = dup(0xffffffffffffffff)
r6 = dup(0xffffffffffffffff)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x2)
ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000140)=""/29)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r7=>r4, {0x4}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)

17:12:24 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x16, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:24 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x8f03, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:24 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1344a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = socket$inet(0x2, 0x6, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r5 = dup(0xffffffffffffffff) (async)
r6 = dup(0xffffffffffffffff)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x2) (async)
ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000140)=""/29) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r7=>r4, {0x4}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)

17:12:24 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x18, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:24 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xb001, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:24 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xae00, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1535.587027][T16144] xt_check_match: 52 callbacks suppressed
[ 1535.587091][T16144] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:25 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000040)={0xc, 0x8, 0xfa00, {&(0x7f0000000140)}}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

17:12:25 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1344a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async, rerun: 64)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async, rerun: 64)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
r5 = dup(0xffffffffffffffff) (async, rerun: 64)
r6 = dup(0xffffffffffffffff) (rerun: 64)
fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x2) (async)
ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000140)=""/29) (async)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000280)={{0x1, 0x1, 0x18, <r7=>r4, {0x4}}, './file0\x00'})
io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)

17:12:25 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x19, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:25 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xb001, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:25 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xb801, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:25 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x1000019, 0x100010, r0, 0x0)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe8c3}, @map_fd={0x18, 0x6}], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x80100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xc, 0x8, 0x3}, 0x10, 0xffffffffffffffff}, 0x80)
fsetxattr$trusted_overlay_redirect(r7, &(0x7f00000004c0), &(0x7f0000000500)='./file0/../file0\x00', 0x11, 0x2)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x3002}}, 0x3)
r8 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:25 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x1a, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:25 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xb201, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:25 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x1c, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:25 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x186, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffff7}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000180)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r2 = socket$inet(0x2, 0x6, 0x0)
io_uring_enter(r2, 0x2133, 0x502, 0x0, &(0x7f0000000100)={[0x8000000000000000]}, 0x8)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in}, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
utimensat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}, 0x100)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:25 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xc400, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:25 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x1000019, 0x100010, r0, 0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0) (async)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe8c3}, @map_fd={0x18, 0x6}], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x80100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xc, 0x8, 0x3}, 0x10, 0xffffffffffffffff}, 0x80)
fsetxattr$trusted_overlay_redirect(r7, &(0x7f00000004c0), &(0x7f0000000500)='./file0/../file0\x00', 0x11, 0x2) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x3002}}, 0x3) (async)
r8 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

[ 1536.372567][T16158] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1536.447534][T16182] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1536.748754][T25704] ==================================================================
[ 1536.756866][T25704] BUG: KCSAN: data-race in __neigh_event_send / ip6_dst_lookup_tail
[ 1536.764825][T25704] 
[ 1536.767138][T25704] write to 0xffff88813862fe84 of 1 bytes by task 35 on cpu 0:
[ 1536.774567][T25704]  __neigh_event_send+0x458/0xbc0
[ 1536.779592][T25704]  neigh_resolve_output+0x110/0x430
[ 1536.784773][T25704]  ip6_finish_output2+0xa00/0xc20
[ 1536.789777][T25704]  ip6_finish_output+0x446/0x4c0
[ 1536.794693][T25704]  ip6_output+0x10e/0x210
[ 1536.799000][T25704]  ip6_local_out+0x60/0x80
[ 1536.803397][T25704]  udp_tunnel6_xmit_skb+0x2e7/0x470
[ 1536.808580][T25704]  send6+0x2ed/0x3b0
[ 1536.812470][T25704]  wg_socket_send_skb_to_peer+0xbb/0x120
[ 1536.818090][T25704]  wg_socket_send_buffer_to_peer+0xd2/0xf0
[ 1536.823881][T25704]  wg_packet_handshake_send_worker+0x109/0x150
[ 1536.830015][T25704]  process_one_work+0x3d3/0x720
[ 1536.834853][T25704]  worker_thread+0x618/0xa70
[ 1536.839425][T25704]  kthread+0x1a9/0x1e0
[ 1536.843474][T25704]  ret_from_fork+0x1f/0x30
[ 1536.847883][T25704] 
[ 1536.850194][T25704] read to 0xffff88813862fe84 of 1 bytes by task 25704 on cpu 1:
[ 1536.857800][T25704]  ip6_dst_lookup_tail+0x73e/0x940
[ 1536.862889][T25704]  ip6_dst_lookup_flow+0x44/0xc0
[ 1536.867804][T25704]  send6+0x23a/0x3b0
[ 1536.871678][T25704]  wg_socket_send_skb_to_peer+0xbb/0x120
[ 1536.877460][T25704]  wg_socket_send_buffer_to_peer+0xd2/0xf0
[ 1536.883247][T25704]  wg_packet_handshake_send_worker+0x109/0x150
[ 1536.889393][T25704]  process_one_work+0x3d3/0x720
[ 1536.894223][T25704]  worker_thread+0x618/0xa70
[ 1536.898795][T25704]  kthread+0x1a9/0x1e0
[ 1536.902851][T25704]  ret_from_fork+0x1f/0x30
[ 1536.907249][T25704] 
[ 1536.909547][T25704] value changed: 0x20 -> 0x01
[ 1536.914201][T25704] 
[ 1536.916507][T25704] Reported by Kernel Concurrency Sanitizer on:
[ 1536.922627][T25704] CPU: 1 PID: 25704 Comm: kworker/u4:65 Not tainted 5.18.0-rc3-syzkaller-00235-g22da5264abf4-dirty #0
[ 1536.933542][T25704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1536.943623][T25704] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker
[ 1536.950761][T25704] ==================================================================
17:12:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x1d, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:26 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xb801, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:26 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x1000019, 0x100010, r0, 0x0) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe8c3}, @map_fd={0x18, 0x6}], &(0x7f0000000380)='syzkaller\x00', 0x8, 0x0, 0x0, 0x80100, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xc, 0x8, 0x3}, 0x10, 0xffffffffffffffff}, 0x80)
fsetxattr$trusted_overlay_redirect(r7, &(0x7f00000004c0), &(0x7f0000000500)='./file0/../file0\x00', 0x11, 0x2)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r3, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x3002}}, 0x3) (async)
r8 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:26 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x186, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffff7}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000180)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r2 = socket$inet(0x2, 0x6, 0x0)
io_uring_enter(r2, 0x2133, 0x502, 0x0, &(0x7f0000000100)={[0x8000000000000000]}, 0x8) (async)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
utimensat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}, 0x100) (async)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)

17:12:26 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xc501, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:26 executing program 5:
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x1d52}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd=r2, 0x0, 0x0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
io_uring_enter(r4, 0xba9, 0x0, 0x2, 0x0, 0x0)

17:12:26 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x186, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfffffff7}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000180)=<r1=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r2 = socket$inet(0x2, 0x6, 0x0)
io_uring_enter(r2, 0x2133, 0x502, 0x0, &(0x7f0000000100)={[0x8000000000000000]}, 0x8)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async)
utimensat(r3, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{}, {0x77359400}}, 0x100)
dup(0xffffffffffffffff) (async, rerun: 32)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (rerun: 32)

17:12:26 executing program 5:
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x1d52}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd=r2, 0x0, 0x0}, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) (async)
io_uring_enter(r4, 0xba9, 0x0, 0x2, 0x0, 0x0)

17:12:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x1e, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:26 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xcd02, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:26 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xc400, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x21, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1537.248440][T16193] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:26 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xcd02, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x22, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:26 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x7e52, 0xe9c9, 0x0, &(0x7f0000000100)={[0x2]}, 0x8)

[ 1537.317919][T16211] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:26 executing program 5:
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x1d52}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0) (async)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x5, 0x0, @fd=r2, 0x0, 0x0}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)}}, 0x20) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
io_uring_enter(r4, 0xba9, 0x0, 0x2, 0x0, 0x0)

17:12:26 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xd000, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x23, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:26 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1537.373849][T16223] net_ratelimit: 5205 callbacks suppressed
[ 1537.373903][T16223] dccp_time_wait: time wait bucket table overflow
[ 1537.387680][T16226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=16226 comm=syz-executor.3
[ 1537.393534][T16223] dccp_time_wait: time wait bucket table overflow
[ 1537.426507][T16232] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1537.437230][T16223] dccp_time_wait: time wait bucket table overflow
[ 1537.441714][T16223] dccp_time_wait: time wait bucket table overflow
[ 1537.465642][T16223] dccp_time_wait: time wait bucket table overflow
17:12:26 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd400, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x24, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:26 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xd203, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:26 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xd400, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1537.491241][T16223] dccp_time_wait: time wait bucket table overflow
[ 1537.505902][T16237] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1537.516855][T16235] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1537.531530][T16223] dccp_time_wait: time wait bucket table overflow
17:12:26 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xd502, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x25, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1537.551439][T16223] dccp_time_wait: time wait bucket table overflow
[ 1537.576044][T16223] dccp_time_wait: time wait bucket table overflow
17:12:26 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xd502, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

[ 1537.595866][T16244] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1537.609667][T16223] dccp_time_wait: time wait bucket table overflow
[ 1537.632131][T16248] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:26 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x26, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:26 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xe000, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:26 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xe000, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:26 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x7e52, 0xe9c9, 0x0, &(0x7f0000000100)={[0x2]}, 0x8)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
io_uring_enter(r0, 0x7e52, 0xe9c9, 0x0, &(0x7f0000000100)={[0x2]}, 0x8) (async)

17:12:26 executing program 5:
r0 = syz_io_uring_setup(0x333c, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003bc0)={&(0x7f0000002680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002700)=[{&(0x7f00000029c0)=""/236, 0xec}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/199, 0xc7}], 0x3}, 0x0, 0x2000, 0x1, {0x2}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000002480)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xe583, @loopback, 0x9a}}}, 0x30)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f00000000c0))
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
io_submit(0x0, 0x4, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f00000024c0)="53fbf95a9d84fee01ffd7a6ac44a195b7e8e5219c445ef03d55f3989283774bca252e24f9992877ee87732e49e3f27406fcfe0978da514b280ee330086bc327b72c8052feff77c024cac49969f65b4d2daad88afc377e18c67d4abd3f7b526369938e45df4b29b9dbd41e24366e514eef3d48c1a62cb4400feb5677b29d09942bafc91ed37c7a9ead0d7f2c414e83d482e0eda3b27b12291064b61b82feb9b46f7a5eefffe1bb3704ee8c54bbbb035ed56c354fdec4883260dd8ad2035413c3fe8818c188fab2adc6062fa98df85e7f5c4", 0xd1, 0x2, 0x0, 0x2}, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000002600)="712c14680963a5478df18a3d82ddcf5b28848781bc715d647fdc8992698b51c471c5da355565ceb1a3fca459614914a1516ca726837be4dc822346", 0x3b, 0x1, 0x0, 0x2}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x2, 0xffff, r7, &(0x7f0000002900)="dfaf3d0384e07a7c6408819fd64b369053abc093b56539a5edcba2abb216e98a47b93b70575285997f25fe2e0aa55a49ea3e8be7ea9f93050f367e7981ecb637c6a3c599b1bcffef948f481a030a91ab65822892347ad4a5ec970081c250ce34d844b867674132627ac7ed9b9a7f6a17e886e694d33e131b2d254fc411ea63fc65", 0x81, 0x20, 0x0, 0x2, r3}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x1, 0x8000, r8, &(0x7f0000002780)="7228ba706106ea1db583e8cc730e5946ce5537cb07ea2ba69582c81bbb4a233cf5e69d7d98548d789e78f2f866288087721db85204a64a9f6d452759344c512ffb2ef1ab3f216c9aa76446e62b5ef17fb77047e396d4291d314cf6f7df8085d72d1c8c9cc89ab6bf0ad969fd9005476237deba681b1e7a82792bab73eac9f12323090f6abaeb13e32bcd70270b9398c39b0d0cb2a5db451b950b3f7ce9126eb262f11967ecfb16c879cb68129ae4980ead84cda4c4d3ca90221444dc567ad38a8c68ce7bc4531055f64dc2a6db4fa0", 0xcf, 0x6, 0x0, 0x2}])
syz_io_uring_submit(r4, r2, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000002400)={&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x2, &(0x7f0000002380)=""/114, 0x72}, 0x0, 0x10020, 0x1}, 0x3)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0)

17:12:26 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x2}, 0x1)
r6 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_setup(0x65cf, &(0x7f0000000380)={0x0, 0x27ed, 0x2, 0x2, 0x22d, 0x0, r0}, &(0x7f000014a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000400)=<r7=>0x0)
r8 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
r12 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
syz_io_uring_submit(r9, r12, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1)
syz_io_uring_submit(0x0, r7, &(0x7f0000000540)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd, 0x1, &(0x7f0000000440)="d2fde1997276b77e329d66a2ee75ded4f3889ca879814945fa185815c74e34e2c73524d5814fab1ed210b98f3fde7b253e5c8e5ca5b2c98c4e0ad6320f8c8be4c59bbed451906598432b37dda02e3089f39006322d5646fc69953dd39e6af519a36b498620f8a51a394b975c341531436b294b7e25f687af71f63658eddc2083fb51795c39d2ffcd144ba5a68b1a2852e4ddf9c372b34632cc8676c0aa13a390874eb4feff8177d0fb5d5cbc8549352bb139e8f269ebf8389b43264692124ef9ee9cf1da790b6f0021022633cae8b1f5bbbe4b7108b26a0f", 0xd8, 0x6, 0x1, {0x0, r11}}, 0x3f)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:27 executing program 5:
r0 = syz_io_uring_setup(0x333c, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003bc0)={&(0x7f0000002680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002700)=[{&(0x7f00000029c0)=""/236, 0xec}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/199, 0xc7}], 0x3}, 0x0, 0x2000, 0x1, {0x2}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000002480)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xe583, @loopback, 0x9a}}}, 0x30)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f00000000c0))
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
io_submit(0x0, 0x4, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f00000024c0)="53fbf95a9d84fee01ffd7a6ac44a195b7e8e5219c445ef03d55f3989283774bca252e24f9992877ee87732e49e3f27406fcfe0978da514b280ee330086bc327b72c8052feff77c024cac49969f65b4d2daad88afc377e18c67d4abd3f7b526369938e45df4b29b9dbd41e24366e514eef3d48c1a62cb4400feb5677b29d09942bafc91ed37c7a9ead0d7f2c414e83d482e0eda3b27b12291064b61b82feb9b46f7a5eefffe1bb3704ee8c54bbbb035ed56c354fdec4883260dd8ad2035413c3fe8818c188fab2adc6062fa98df85e7f5c4", 0xd1, 0x2, 0x0, 0x2}, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000002600)="712c14680963a5478df18a3d82ddcf5b28848781bc715d647fdc8992698b51c471c5da355565ceb1a3fca459614914a1516ca726837be4dc822346", 0x3b, 0x1, 0x0, 0x2}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x2, 0xffff, r7, &(0x7f0000002900)="dfaf3d0384e07a7c6408819fd64b369053abc093b56539a5edcba2abb216e98a47b93b70575285997f25fe2e0aa55a49ea3e8be7ea9f93050f367e7981ecb637c6a3c599b1bcffef948f481a030a91ab65822892347ad4a5ec970081c250ce34d844b867674132627ac7ed9b9a7f6a17e886e694d33e131b2d254fc411ea63fc65", 0x81, 0x20, 0x0, 0x2, r3}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x1, 0x8000, r8, &(0x7f0000002780)="7228ba706106ea1db583e8cc730e5946ce5537cb07ea2ba69582c81bbb4a233cf5e69d7d98548d789e78f2f866288087721db85204a64a9f6d452759344c512ffb2ef1ab3f216c9aa76446e62b5ef17fb77047e396d4291d314cf6f7df8085d72d1c8c9cc89ab6bf0ad969fd9005476237deba681b1e7a82792bab73eac9f12323090f6abaeb13e32bcd70270b9398c39b0d0cb2a5db451b950b3f7ce9126eb262f11967ecfb16c879cb68129ae4980ead84cda4c4d3ca90221444dc567ad38a8c68ce7bc4531055f64dc2a6db4fa0", 0xcf, 0x6, 0x0, 0x2}])
syz_io_uring_submit(r4, r2, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000002400)={&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x2, &(0x7f0000002380)=""/114, 0x72}, 0x0, 0x10020, 0x1}, 0x3)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0)
syz_io_uring_setup(0x333c, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003bc0)={&(0x7f0000002680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002700)=[{&(0x7f00000029c0)=""/236, 0xec}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/199, 0xc7}], 0x3}, 0x0, 0x2000, 0x1, {0x2}}, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000002480)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xe583, @loopback, 0x9a}}}, 0x30) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) (async)
socket$inet_tcp(0x2, 0x3, 0x6) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f00000000c0)) (async)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
io_submit(0x0, 0x4, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f00000024c0)="53fbf95a9d84fee01ffd7a6ac44a195b7e8e5219c445ef03d55f3989283774bca252e24f9992877ee87732e49e3f27406fcfe0978da514b280ee330086bc327b72c8052feff77c024cac49969f65b4d2daad88afc377e18c67d4abd3f7b526369938e45df4b29b9dbd41e24366e514eef3d48c1a62cb4400feb5677b29d09942bafc91ed37c7a9ead0d7f2c414e83d482e0eda3b27b12291064b61b82feb9b46f7a5eefffe1bb3704ee8c54bbbb035ed56c354fdec4883260dd8ad2035413c3fe8818c188fab2adc6062fa98df85e7f5c4", 0xd1, 0x2, 0x0, 0x2}, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000002600)="712c14680963a5478df18a3d82ddcf5b28848781bc715d647fdc8992698b51c471c5da355565ceb1a3fca459614914a1516ca726837be4dc822346", 0x3b, 0x1, 0x0, 0x2}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x2, 0xffff, r7, &(0x7f0000002900)="dfaf3d0384e07a7c6408819fd64b369053abc093b56539a5edcba2abb216e98a47b93b70575285997f25fe2e0aa55a49ea3e8be7ea9f93050f367e7981ecb637c6a3c599b1bcffef948f481a030a91ab65822892347ad4a5ec970081c250ce34d844b867674132627ac7ed9b9a7f6a17e886e694d33e131b2d254fc411ea63fc65", 0x81, 0x20, 0x0, 0x2, r3}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x1, 0x8000, r8, &(0x7f0000002780)="7228ba706106ea1db583e8cc730e5946ce5537cb07ea2ba69582c81bbb4a233cf5e69d7d98548d789e78f2f866288087721db85204a64a9f6d452759344c512ffb2ef1ab3f216c9aa76446e62b5ef17fb77047e396d4291d314cf6f7df8085d72d1c8c9cc89ab6bf0ad969fd9005476237deba681b1e7a82792bab73eac9f12323090f6abaeb13e32bcd70270b9398c39b0d0cb2a5db451b950b3f7ce9126eb262f11967ecfb16c879cb68129ae4980ead84cda4c4d3ca90221444dc567ad38a8c68ce7bc4531055f64dc2a6db4fa0", 0xcf, 0x6, 0x0, 0x2}]) (async)
syz_io_uring_submit(r4, r2, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000002400)={&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x2, &(0x7f0000002380)=""/114, 0x72}, 0x0, 0x10020, 0x1}, 0x3) (async)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0) (async)

17:12:27 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xe102, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:27 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xea03, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x28, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

[ 1538.205765][T16263] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[ 1538.228760][T16257] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'.
17:12:27 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0) (async)
r5 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async, rerun: 32)
syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x2}, 0x1) (async, rerun: 32)
r6 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in}, 0x0) (async, rerun: 32)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async, rerun: 32)
syz_io_uring_setup(0x65cf, &(0x7f0000000380)={0x0, 0x27ed, 0x2, 0x2, 0x22d, 0x0, r0}, &(0x7f000014a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000400)=<r7=>0x0) (async)
r8 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) (async)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async)
r12 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
syz_io_uring_submit(r9, r12, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1)
syz_io_uring_submit(0x0, r7, &(0x7f0000000540)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd, 0x1, &(0x7f0000000440)="d2fde1997276b77e329d66a2ee75ded4f3889ca879814945fa185815c74e34e2c73524d5814fab1ed210b98f3fde7b253e5c8e5ca5b2c98c4e0ad6320f8c8be4c59bbed451906598432b37dda02e3089f39006322d5646fc69953dd39e6af519a36b498620f8a51a394b975c341531436b294b7e25f687af71f63658eddc2083fb51795c39d2ffcd144ba5a68b1a2852e4ddf9c372b34632cc8676c0aa13a390874eb4feff8177d0fb5d5cbc8549352bb139e8f269ebf8389b43264692124ef9ee9cf1da790b6f0021022633cae8b1f5bbbe4b7108b26a0f", 0xd8, 0x6, 0x1, {0x0, r11}}, 0x3f)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:27 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xe102, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:27 executing program 5:
r0 = syz_io_uring_setup(0x333c, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000003bc0)={&(0x7f0000002680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002700)=[{&(0x7f00000029c0)=""/236, 0xec}, {&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/199, 0xc7}], 0x3}, 0x0, 0x2000, 0x1, {0x2}}, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000002480)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0xe583, @loopback, 0x9a}}}, 0x30) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f00000000c0))
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
io_submit(0x0, 0x4, &(0x7f00000028c0)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x2, 0x6, 0xffffffffffffffff, &(0x7f00000024c0)="53fbf95a9d84fee01ffd7a6ac44a195b7e8e5219c445ef03d55f3989283774bca252e24f9992877ee87732e49e3f27406fcfe0978da514b280ee330086bc327b72c8052feff77c024cac49969f65b4d2daad88afc377e18c67d4abd3f7b526369938e45df4b29b9dbd41e24366e514eef3d48c1a62cb4400feb5677b29d09942bafc91ed37c7a9ead0d7f2c414e83d482e0eda3b27b12291064b61b82feb9b46f7a5eefffe1bb3704ee8c54bbbb035ed56c354fdec4883260dd8ad2035413c3fe8818c188fab2adc6062fa98df85e7f5c4", 0xd1, 0x2, 0x0, 0x2}, &(0x7f0000002640)={0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000002600)="712c14680963a5478df18a3d82ddcf5b28848781bc715d647fdc8992698b51c471c5da355565ceb1a3fca459614914a1516ca726837be4dc822346", 0x3b, 0x1, 0x0, 0x2}, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x2, 0xffff, r7, &(0x7f0000002900)="dfaf3d0384e07a7c6408819fd64b369053abc093b56539a5edcba2abb216e98a47b93b70575285997f25fe2e0aa55a49ea3e8be7ea9f93050f367e7981ecb637c6a3c599b1bcffef948f481a030a91ab65822892347ad4a5ec970081c250ce34d844b867674132627ac7ed9b9a7f6a17e886e694d33e131b2d254fc411ea63fc65", 0x81, 0x20, 0x0, 0x2, r3}, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x1, 0x8000, r8, &(0x7f0000002780)="7228ba706106ea1db583e8cc730e5946ce5537cb07ea2ba69582c81bbb4a233cf5e69d7d98548d789e78f2f866288087721db85204a64a9f6d452759344c512ffb2ef1ab3f216c9aa76446e62b5ef17fb77047e396d4291d314cf6f7df8085d72d1c8c9cc89ab6bf0ad969fd9005476237deba681b1e7a82792bab73eac9f12323090f6abaeb13e32bcd70270b9398c39b0d0cb2a5db451b950b3f7ce9126eb262f11967ecfb16c879cb68129ae4980ead84cda4c4d3ca90221444dc567ad38a8c68ce7bc4531055f64dc2a6db4fa0", 0xcf, 0x6, 0x0, 0x2}]) (async)
syz_io_uring_submit(r4, r2, &(0x7f0000002440)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000002400)={&(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x2, &(0x7f0000002380)=""/114, 0x72}, 0x0, 0x10020, 0x1}, 0x3) (async)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}}, 0x0)

17:12:27 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xf203, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1538.280283][T16292] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1538.317096][T16302] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
17:12:27 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_enter(r0, 0x7e52, 0xe9c9, 0x0, &(0x7f0000000100)={[0x2]}, 0x8)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffff9}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async)
io_uring_enter(r0, 0x7e52, 0xe9c9, 0x0, &(0x7f0000000100)={[0x2]}, 0x8) (async)

17:12:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x29, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:27 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0) (async, rerun: 32)
r5 = socket$inet_tcp(0x2, 0x3, 0x6) (rerun: 32)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_NOP={0x0, 0x2}, 0x1) (async, rerun: 64)
r6 = socket$inet(0x2, 0x6, 0x0) (rerun: 64)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async, rerun: 64)
syz_io_uring_setup(0x65cf, &(0x7f0000000380)={0x0, 0x27ed, 0x2, 0x2, 0x22d, 0x0, r0}, &(0x7f000014a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280), &(0x7f0000000400)=<r7=>0x0) (async, rerun: 64)
r8 = syz_io_uring_setup(0x43ef, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000540)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) (async)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) (async)
r12 = mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r8, 0x10000000)
syz_io_uring_submit(r9, r12, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, r11}}, 0x1) (async)
syz_io_uring_submit(0x0, r7, &(0x7f0000000540)=@IORING_OP_WRITE={0x17, 0x3, 0x2000, @fd, 0x1, &(0x7f0000000440)="d2fde1997276b77e329d66a2ee75ded4f3889ca879814945fa185815c74e34e2c73524d5814fab1ed210b98f3fde7b253e5c8e5ca5b2c98c4e0ad6320f8c8be4c59bbed451906598432b37dda02e3089f39006322d5646fc69953dd39e6af519a36b498620f8a51a394b975c341531436b294b7e25f687af71f63658eddc2083fb51795c39d2ffcd144ba5a68b1a2852e4ddf9c372b34632cc8676c0aa13a390874eb4feff8177d0fb5d5cbc8549352bb139e8f269ebf8389b43264692124ef9ee9cf1da790b6f0021022633cae8b1f5bbbe4b7108b26a0f", 0xd8, 0x6, 0x1, {0x0, r11}}, 0x3f) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r6, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:27 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

17:12:27 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xf403, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:27 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xea03, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:27 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xf603, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:27 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

17:12:27 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xee03, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x2a, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:27 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xfc03, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:27 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080), &(0x7f0000000100)) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) (rerun: 64)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

[ 1538.601306][T16327] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'.
17:12:27 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xfd03, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:27 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xf203, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x2b, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:27 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0xec857c4affae25cc, 0x2c0, 0x12345, {0x0, r7}}, 0x27d)
sendmsg$inet(r6, &(0x7f0000000880)={&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000240)="15e54b4067700d7488cf146f566d8ddac22cc0c5659a3a4da8bab3acb51b2fdd5e16d740ccc4572b0926883a324e17858cd06bc67c2488932fd8001358133cf15030324cbd20f965bb4a", 0x4a}, {&(0x7f0000000380)="66e082b5da39571d3a86a0dc4a9654103eabe9cf85e8bea2fdaa73ac1ad0a68f435a38cf1534269449701414678b946dbad0af0cb88fb5146db396853f8639f47a192eadf8b3298623b0583d0b13629fc3a3dcab1ed89108d4b43afadb87fc6e76a1fd1572e6", 0x66}, {&(0x7f0000000400)}, {&(0x7f0000000440)="50f9fe1ee48a8b950438c84321b248d882b748473891024eff82e0d39912e9a6b1b02a339aedce781b44e8cf7e9d148be52bf55cf8af50e412419a702505c4c8df2df7f8a22045cb81d7620bba2b4cac0c92f7495e5e0c7ed9c9982fd087175f5fdc9e16bb976ce00100", 0x6a}, {&(0x7f00000004c0)="80ada7e6f80f7350d15f0a404defc6abc436d7373f21e9e7933a69d0471ef9c55c10189b45bdfd80d11dca8c30b61e3d2f", 0x31}, {&(0x7f0000000500)="40a26559dfa4e27e97a7f6342c010e606014579c9795993dfe44caf034ef115aef5c67b46d9923c5b8d43bb888c609ebcec28f5b3ae4796579f875ceeb22d1042a01ee984b3124b5406dc6462538eebe64d5208f36d69c66ec7b81f1bdaee946f0d4de83fb341926c7bfa1cf7bfb9f5652dd3d8ad264ae2774a99f5bb4f992683325b8f2c5467177673615547d8a86585080b0d97900e269bb492c37a0383b1c1b3977caa4e6a9b205f08ecccb5f2d7c99e3a1275c241cf44168ff69f30fc4", 0xbf}, {&(0x7f00000005c0)="df640b3cab036f4807b3bf10ef5eaf1f94738dbfddf0b923d212b6261c54ff93fdc6222e03319a1c659fcc1f6d81ba1cfc90c8fb889fc74a255767d1687f0ec03098cbe60316cd97262cb2b8fbe92f9610f333a1d0a344fd413182d4bcc10c162f8679f5ac717eca09211b3e15999522ab7e39f96a8e8b34f9c44cb89e09fe26d6cc4c8b14abb237196f34a76c4fcb9068cf1a010c5e0d5ea84ce7018285137513cb78055b85248f782b6569c9baed7f1838bbca4a4e4d5b0812e390632aebbf970e3adf1d3ddc891652f23a3918a127a0d221733e25a0ee5ac6acba96", 0xdd}], 0x7, &(0x7f0000000740)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x58}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x86, 0x11, "cc917c7cf3167067593b2ee342e21a"}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@cipso={0x86, 0x5a, 0x2, [{0x2, 0x11, "0c484a5c8cad17074045cc0b426b63"}, {0x7, 0x7, "0551a314dd"}, {0x0, 0xc, "bfccaefc67ae431117d7"}, {0x7, 0xa, "d1802b2ec1de2abb"}, {0x2, 0x3, '6'}, {0x0, 0x11, "7554bb7e093fb9a3cab1ad85fa55d5"}, {0x0, 0x9, "a7a7ea17184462"}, {0x5, 0x9, "f230e94773fd80"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4f}}], 0x140}, 0x4000801)

17:12:27 executing program 1:
r0 = memfd_secret(0x80000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0xab)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:27 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xbffffffd}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000149000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000480)={0x20000002})
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x7, 0x81, 0x1, 0x0, 0x9e1, 0x40012, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x800, 0x7ff, 0xff, 0x7, 0x9, 0xffff7fff, 0x73b2, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xe779a891b857ca2d)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x2, 0x1, 0x4, 0x3, 0x0, 0x7, 0x40, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x8800, 0xab10, 0x5, 0x0, 0x6, 0x7f, 0x9, 0x0, 0x80, 0x0, 0x2}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4)
r5 = socket$inet(0x2, 0x6, 0x0)
r6 = open(&(0x7f00000004c0)='./file0\x00', 0x599100, 0x8)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
connect$inet(r6, &(0x7f0000000280)={0x2, 0x6e23, @empty}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)

17:12:27 executing program 1:
r0 = memfd_secret(0x80000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0xab)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
memfd_secret(0x80000) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0xab) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)

17:12:27 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0) (async)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0xec857c4affae25cc, 0x2c0, 0x12345, {0x0, r7}}, 0x27d)
sendmsg$inet(r6, &(0x7f0000000880)={&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000240)="15e54b4067700d7488cf146f566d8ddac22cc0c5659a3a4da8bab3acb51b2fdd5e16d740ccc4572b0926883a324e17858cd06bc67c2488932fd8001358133cf15030324cbd20f965bb4a", 0x4a}, {&(0x7f0000000380)="66e082b5da39571d3a86a0dc4a9654103eabe9cf85e8bea2fdaa73ac1ad0a68f435a38cf1534269449701414678b946dbad0af0cb88fb5146db396853f8639f47a192eadf8b3298623b0583d0b13629fc3a3dcab1ed89108d4b43afadb87fc6e76a1fd1572e6", 0x66}, {&(0x7f0000000400)}, {&(0x7f0000000440)="50f9fe1ee48a8b950438c84321b248d882b748473891024eff82e0d39912e9a6b1b02a339aedce781b44e8cf7e9d148be52bf55cf8af50e412419a702505c4c8df2df7f8a22045cb81d7620bba2b4cac0c92f7495e5e0c7ed9c9982fd087175f5fdc9e16bb976ce00100", 0x6a}, {&(0x7f00000004c0)="80ada7e6f80f7350d15f0a404defc6abc436d7373f21e9e7933a69d0471ef9c55c10189b45bdfd80d11dca8c30b61e3d2f", 0x31}, {&(0x7f0000000500)="40a26559dfa4e27e97a7f6342c010e606014579c9795993dfe44caf034ef115aef5c67b46d9923c5b8d43bb888c609ebcec28f5b3ae4796579f875ceeb22d1042a01ee984b3124b5406dc6462538eebe64d5208f36d69c66ec7b81f1bdaee946f0d4de83fb341926c7bfa1cf7bfb9f5652dd3d8ad264ae2774a99f5bb4f992683325b8f2c5467177673615547d8a86585080b0d97900e269bb492c37a0383b1c1b3977caa4e6a9b205f08ecccb5f2d7c99e3a1275c241cf44168ff69f30fc4", 0xbf}, {&(0x7f00000005c0)="df640b3cab036f4807b3bf10ef5eaf1f94738dbfddf0b923d212b6261c54ff93fdc6222e03319a1c659fcc1f6d81ba1cfc90c8fb889fc74a255767d1687f0ec03098cbe60316cd97262cb2b8fbe92f9610f333a1d0a344fd413182d4bcc10c162f8679f5ac717eca09211b3e15999522ab7e39f96a8e8b34f9c44cb89e09fe26d6cc4c8b14abb237196f34a76c4fcb9068cf1a010c5e0d5ea84ce7018285137513cb78055b85248f782b6569c9baed7f1838bbca4a4e4d5b0812e390632aebbf970e3adf1d3ddc891652f23a3918a127a0d221733e25a0ee5ac6acba96", 0xdd}], 0x7, &(0x7f0000000740)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x58}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x86, 0x11, "cc917c7cf3167067593b2ee342e21a"}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@cipso={0x86, 0x5a, 0x2, [{0x2, 0x11, "0c484a5c8cad17074045cc0b426b63"}, {0x7, 0x7, "0551a314dd"}, {0x0, 0xc, "bfccaefc67ae431117d7"}, {0x7, 0xa, "d1802b2ec1de2abb"}, {0x2, 0x3, '6'}, {0x0, 0x11, "7554bb7e093fb9a3cab1ad85fa55d5"}, {0x0, 0x9, "a7a7ea17184462"}, {0x5, 0x9, "f230e94773fd80"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4f}}], 0x140}, 0x4000801)

17:12:27 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x2c, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:27 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xf403, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:27 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xfe03, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:27 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000) (async)
syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f00005ea000/0x4000)=nil, &(0x7f0000000040)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0) (async)
r6 = socket$inet_tcp(0x2, 0x3, 0x6)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@un=@file={0x0, './file0/../file0\x00'}}, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0xec857c4affae25cc, 0x2c0, 0x12345, {0x0, r7}}, 0x27d) (async)
sendmsg$inet(r6, &(0x7f0000000880)={&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000240)="15e54b4067700d7488cf146f566d8ddac22cc0c5659a3a4da8bab3acb51b2fdd5e16d740ccc4572b0926883a324e17858cd06bc67c2488932fd8001358133cf15030324cbd20f965bb4a", 0x4a}, {&(0x7f0000000380)="66e082b5da39571d3a86a0dc4a9654103eabe9cf85e8bea2fdaa73ac1ad0a68f435a38cf1534269449701414678b946dbad0af0cb88fb5146db396853f8639f47a192eadf8b3298623b0583d0b13629fc3a3dcab1ed89108d4b43afadb87fc6e76a1fd1572e6", 0x66}, {&(0x7f0000000400)}, {&(0x7f0000000440)="50f9fe1ee48a8b950438c84321b248d882b748473891024eff82e0d39912e9a6b1b02a339aedce781b44e8cf7e9d148be52bf55cf8af50e412419a702505c4c8df2df7f8a22045cb81d7620bba2b4cac0c92f7495e5e0c7ed9c9982fd087175f5fdc9e16bb976ce00100", 0x6a}, {&(0x7f00000004c0)="80ada7e6f80f7350d15f0a404defc6abc436d7373f21e9e7933a69d0471ef9c55c10189b45bdfd80d11dca8c30b61e3d2f", 0x31}, {&(0x7f0000000500)="40a26559dfa4e27e97a7f6342c010e606014579c9795993dfe44caf034ef115aef5c67b46d9923c5b8d43bb888c609ebcec28f5b3ae4796579f875ceeb22d1042a01ee984b3124b5406dc6462538eebe64d5208f36d69c66ec7b81f1bdaee946f0d4de83fb341926c7bfa1cf7bfb9f5652dd3d8ad264ae2774a99f5bb4f992683325b8f2c5467177673615547d8a86585080b0d97900e269bb492c37a0383b1c1b3977caa4e6a9b205f08ecccb5f2d7c99e3a1275c241cf44168ff69f30fc4", 0xbf}, {&(0x7f00000005c0)="df640b3cab036f4807b3bf10ef5eaf1f94738dbfddf0b923d212b6261c54ff93fdc6222e03319a1c659fcc1f6d81ba1cfc90c8fb889fc74a255767d1687f0ec03098cbe60316cd97262cb2b8fbe92f9610f333a1d0a344fd413182d4bcc10c162f8679f5ac717eca09211b3e15999522ab7e39f96a8e8b34f9c44cb89e09fe26d6cc4c8b14abb237196f34a76c4fcb9068cf1a010c5e0d5ea84ce7018285137513cb78055b85248f782b6569c9baed7f1838bbca4a4e4d5b0812e390632aebbf970e3adf1d3ddc891652f23a3918a127a0d221733e25a0ee5ac6acba96", 0xdd}], 0x7, &(0x7f0000000740)=[@ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x58}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x86, 0x11, "cc917c7cf3167067593b2ee342e21a"}]}}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@cipso={0x86, 0x5a, 0x2, [{0x2, 0x11, "0c484a5c8cad17074045cc0b426b63"}, {0x7, 0x7, "0551a314dd"}, {0x0, 0xc, "bfccaefc67ae431117d7"}, {0x7, 0xa, "d1802b2ec1de2abb"}, {0x2, 0x3, '6'}, {0x0, 0x11, "7554bb7e093fb9a3cab1ad85fa55d5"}, {0x0, 0x9, "a7a7ea17184462"}, {0x5, 0x9, "f230e94773fd80"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4f}}], 0x140}, 0x4000801)

[ 1538.965559][T16370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=16370 comm=syz-executor.3
17:12:27 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0xff00, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:27 executing program 1:
r0 = memfd_secret(0x80000)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_io_uring_setup(0x186, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0xab) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:27 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xf603, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:27 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x9cb}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:27 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x40000, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

[ 1539.033021][T16401] __nla_validate_parse: 1 callbacks suppressed
[ 1539.033037][T16401] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'.
17:12:28 executing program 2:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xbffffffd}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7)
mmap(&(0x7f0000149000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000480)={0x20000002})
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x7, 0x81, 0x1, 0x0, 0x9e1, 0x40012, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x800, 0x7ff, 0xff, 0x7, 0x9, 0xffff7fff, 0x73b2, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xe779a891b857ca2d)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x2, 0x1, 0x4, 0x3, 0x0, 0x7, 0x40, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x8800, 0xab10, 0x5, 0x0, 0x6, 0x7f, 0x9, 0x0, 0x80, 0x0, 0x2}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4)
r5 = socket$inet(0x2, 0x6, 0x0)
r6 = open(&(0x7f00000004c0)='./file0\x00', 0x599100, 0x8)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
connect$inet(r6, &(0x7f0000000280)={0x2, 0x6e23, @empty}, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0x0)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xbffffffd}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000180)) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) (async)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0xfea7) (async)
mmap(&(0x7f0000149000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) (async)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0)) (async)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000480)={0x20000002}) (async)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x80, 0x7, 0x81, 0x1, 0x0, 0x9e1, 0x40012, 0xa, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000100), 0x3}, 0x800, 0x7ff, 0xff, 0x7, 0x9, 0xffff7fff, 0x73b2, 0x0, 0x8, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xe779a891b857ca2d) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4) (async)
perf_event_open$cgroup(&(0x7f0000000400)={0x1, 0x80, 0x2, 0x1, 0x4, 0x3, 0x0, 0x7, 0x40, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000140), 0x3}, 0x8800, 0xab10, 0x5, 0x0, 0x6, 0x7f, 0x9, 0x0, 0x80, 0x0, 0x2}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x4) (async)
socket$inet(0x2, 0x6, 0x0) (async)
open(&(0x7f00000004c0)='./file0\x00', 0x599100, 0x8) (async)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) (async)
connect$inet(r6, &(0x7f0000000280)={0x2, 0x6e23, @empty}, 0x10) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500) (async)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) (async)
dup(0xffffffffffffffff) (async)

17:12:28 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xf803, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:28 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x1}, &(0x7f0000148000/0x2000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000000c0))
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0))
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/keys\x00', 0x0, 0x0)
r6 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0x7)
setuid(r7)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="acdbdf25080032007abb0000c8003a80403a3a2a188c2a21f23a93fa0ea7dc4d46c8728ae4e143db4f0a02660d5a8deb81909264c4daa97716e75fec4159e5ec75645a68395d8664e169b4092a6f98d5690a005f007465616d3000000014006c00000000000000000000000000000000010c000d000700000000000000b8650a92d4791b2cd4485dc780b01da19642b5c4f5f43fd89b3d5fa7e5df92657dc8e9e31a7006f772323d6a542a3a027b2eb21fb1efe8f381029012f7f570dfebc4d3b6a7413cc5b272fe52533f7acf3e37dfa6a8597108005600", @ANYRES32=0xee01, @ANYBLOB="25d51e25c40381fa8941ddc4561e1922db5cf8a796f8e09c515c5652289e6b4a449e0cad79b7782b8c21bfa7d0d211aaf5ac19aae2122a7c108798c76a5fa902eb38b801aea9c7c83495d1b4dacd3b59f06081b6d0465fce700d3f883fdc420ebedf34edc6dacfa53c61dd530905cc67c4f69753149584522ec652e477dbd60fc2b8df842839050e9f7b56545edd9362614bdbcc0343c98b7dc657dbc89577f26ce8006abfe5ff886a7269d66aefa791edfa8ac279833ee1f02b9a6724518c7b137f0aae4bc26757bd6af9efa41412e14b14ffa90dacfca7b93ecde678a17cbcda551c445b9b813ba960f2391db4affae923a65e216abb4ca82cff8b7ade406cb7c1786971d564f3c89de6a7446dfaa013ffeee31fd2b214ff5d1725c53b8f6b6a5358f2c46e82f163477daa4b931fded4e46862b60f1c1573720a8ddd114da0476d7e66738f5705858a29df07483de4a382957eabd7f952fc35ffedae72e0c4bd8ccc16d0f4343162144fe219ba764da53c4f92783471a2f31c8f1e3e358d77a90530d27e2d22af742000e5de8683b25d0981520e0c1a49eaee8559bb6c38204ee3dc6e31c81e730293aeb6c709ee5ddfe24c5bd2f84385ec4bdb1ee0955e3f675690b72a126c43a76ca95401a0ff5129feac4f04c950b54656c6fbe0912008ad3dbd6260148d86b48bf062607ef83522e5e7f1be76c85583062773ea3a55453d9ee79b526142568a07d3e56a0c44bd34a1a493da78cdd62506073bd17e7076cfc51e9fd307c534168f6f0e1b351b7a2f3d09003401343463619ad0e9c5635e15b38b10bb2785a3e62add849749bbe9d095c5a686b30ced8d59b6d7484a2162b9c2a85a822cd28394daf9560bc795bc21b533620fb091858eb96677818504bbebb1eac849f060fdc3b2c35ff14fdf8324c3b013e4a8a933360ce86b4588896eeb150a2ffbd5d54fdebba36026f6c52880cf9aacb490968f80421cee930917ad3c13d01236a29e7fe7c99fe523acfd2336ffaaa44dae659a09f9502030d7afc20a0883d48809d7f0319daa24d974f482548809c0a6299f0a4d0b66b9f8d871651d224fa6d6bdfe32c8eddd926291cc4340c860611e91423282246ef836f788573c3f4fef5542d08b411ff5ac4fe460bc8bce6f2c4bd0af7f72e475e8af98f2f5cf4c82649bb53cdd94569bb78499c04c81bc11ad7a77742ecfe5b65763d7b573aa48fe377ceba7d58a7301fa4543eb3462a7a5c72c3441d1e0abffbe919b33001079a7f8d091a2f4cd0b63b20ba064d8a05313a0d76505d36fce40a0713fef27f0a22a23a23cae2fbd60ecefb4836d2df08194b606f528d284dea951d207ba82b44ce66aa1e9c1f8a4d02536a80a57bde98ca64847a744919c76e8dd1ab123a62866d128d26f5edaba0ade2fa7b38a0ccc8b5b92e1a253c2dfb6f665911194426530f73a89c49ca29dfcc22ec3e63650486a7d229f1a43ea7ea30cbd28c1d13399d0808b748bd4ea9f2b7970983648b156e98e53b9a5f717e1071ad63e6fec0df94831cf40d856630a6347d667a8cd15dbb73d40db640bc0e4bcc986f2dadefdeb6858640ebdcdff35a2cb2164a795ea144fdbd8b04ac2cddb92afd379b6b9bafa814779cef269586050b91bf4ad15633e197adcf905c6055668dc4d776ffe7a8b2b64cfc85d09ecfe4d52d7ea2c28bfbcb649b1d7ae2a3b897438353ad5e527ef98db16e3d878bcac7d34b41968c3db38e7aff61b326f50b10b47a6bbacc5426ed454f039a8a4084460d5da2cfa354769d87ab6d17ca294e7a37524b730227622d7ba5668b6f2327d82161d5c5639151200ddabca1f531de5baea5538da937364187db3c43d9a2ab41d882f6925e407324375cd3ada25dee3f04caa4848f952badabd165d919628b48c2cf34a32f240960209d7f9dfe2a46e701c3fafd80deb372b5e14fed996d3aec14e2c18be1e1fc64bca77f551ef5024a49a0218ecffd22a633f311a80d503ecd03efeb7d972458969ad92497d71dc3cd63869b3e7a3e5afc07e169136e25a5bf22061e638bb7f369dd8de463c8bd8d1b4a5b5af9f9fd208bbeec59c7e83b4af8a6e7d78250a48cf9560084b24aa5968ac3bc64f4c68d355e0e07f87bd273d5c15bd53471f84659682742b563f7b14d6840147191c2126ea94fc1cf27fab60f5d3922aa7255d13f7b68dc14b9089761027d4e92416d9ed62f96a7e958c18f7ed0af092608f987dff0a61c55b08cf36a09cfaa3e18dcc0d6e046c473d98b4e0e8c21ff35ed355c5dd156c9eb9b05375dfaaf2bd04df7558718d3d929c968280a0319fdf25e5295556b54dfd2e42c41577ba7e76ede9f2b7ef46d63e02ca3b8f7b9e153338609e55bbb8b6f8d71297b60b06a77c6ea4e66b8ebb39ee6aa0e07c3f83ad9f1181fc7e9dec015a7a9df6c7172478123cc536a7e88e01e69b143cc17a9dd5095c448ab421e4949e0f5e4b5f475e5de73332e005c9160f2efab47c0ba922c7307365afa7edcfbcda854dc37da5386235c2459a1091fa513c885f2b7961285ceb7341dcdedc3345d3cb1cbb34d42d09ccff8d4c4cacd3cd709ac44d35f345dbed52e7f212d511ef85b104ddca0235b0ac3e25d2065153fa9a6d001013967676279d16d536e5e8ba3dc3e02c9b835ee6d723804a779c986cd455abe2d1f7f6c84e143ef488584f3908b2f0b4673b8b87d7bab9588e6ed369123bc96c7832ffe9e89cd2f025fb6514101927a81f7fc8485e7b32b3583079cf14896d3b4c4237faf2af60e57c6e979332ce4c444fed5cc25c781f6c34aafb0000331170a488665190d15ae4fcf2b305f7388b646065159feef65c17b4176115af1fe462382f855c15c0a678696f77a858ac6c90b8e1e28b7b17174b5f676ce54d1067a81e6fc59a486d7ec5d0ad6ad997791437fd2e07de0b8a1314e599cbf9e1524fd16abf43aa81f20ad51be20cdb1895441eb5e12f0c2b3abbbb47f2b6907743d84239e0c088f7ccc38b6888c67f51d9e914e79897bd9044be3cbfcae205adbd6f40216f16888efc8094412e2a59b865de22f3f8ccdfec64ee2b5681c2cece94cbe8a1712c1de76652375798cf99c41b0bff0d152da3ca7668df5f2968ad51a8cd0891e19ebba631d0f7916e9c1889c4dce21af734f4ffd125b8560aab2a2fc950cde5808c3ce842a274c3e9f7f92f42f826e75f07dc3e7ac412d442c9f107c1731ae0ff7b48d74f95b1d36dce59ecc1b79b6d3ed702cbb9a7110625a86512f98de9d03c8e829dfc1395e84b69c65fea072fc043e8d8d70da325ae5faf5075abb6d5b29a04113b5015c736c92e6909409eae18c81d2adeb4d20f9f31f13bd6cd114fc7d8a95f8091ea62a817ae9016c50656e77142f54b3d66d31d63da0308b005637610f48331d1219d19f30fb6d0ca78a4154e78e3881b49cd4015fb9bf37cb2141638d4b932d45700016771487fd37196ebd722d85c0d395988ab936907c42b1f96848b5540e14b9ec547e4a57131d5698bf0c876de277b489429da716e35a7adda10bf82093dc5ad10a643b3dd207db808700763f6a29a30e297520a34f8ae7058e748f079116be90e3956da0b2f6a929aa847d9c30a02ede24c3ce2e259fc03dda439c9b22b9e247f9eb8db335f3dddd62cfeebfbbc69473fe34c69f9705bacb7269478aa31f2a0176165a6890110173ac739f3079768c9df97dedd88eea3d6de9e2532eb842c3c7e16da4ae8435eca31aa64247697dc49ca14fcfba17d6e25c6ad0c8b63c9033780873d727c1ce702927dee000d45e50737e4edf1081f9ce26458f9fad592f064b04df11430379b68f64544fff4ed8f9ef2b7f8e88b5815ab76ab601aa51f98a1e24e2ae443f0d913b72e411c9aff1d0b68a74d9162e072f7d8a27857725fbbbd76be8292d64d579aa5a6f0abe7f7691c2fd3741248a8081f2a348defca49d9f2c9b23017253ff8bc85868b1366e1f1ca1276e6a883d837fb743863ee0a9402935b7e64c6a7bf3c17fa1199389ad7e3f52e2ac8e8a4842d235d6368e72d9d312d3037dc7babf197430bbf03d3f26e44c6e2e1536d68fc1cf016b51011429c493b36aef0cb9e40891015b5a1f0eb92963261277cec43752c2e06c02c01218a2cc49533da5ce6a9ad2e68ae86e39806eeb1972fd8b21e33f1999c968e2951220d1cd0654ef632a6cdb4ab8183d8aea8a29096a188c7e1428762409fa5c490de5038b5a0480ead92affd1cb8a1ab580cf2b505bc51339448545023acb173edbb9d37ff775e1d5bdb85884651850172bb2dfbd2725a750f89616dd37a6022803ef76a84a01bf3e5ba3ef4f64c0deafc03a2619e5c1c38db515e8e4011dbcbf4b27fb612f61c57da5841c3ec3dae421586dc96bc36f0d3fb4f6d1627ba94a3766084f49b71dea508223c359365c65f89c8ce14c4834111745a62f02b54af7ce45e57530039bb5e9cd38fb6985d8fd41b448a2b877390d3249b4366b54e7e531c8ab616d11903af4c8052025b05ab28be8ad16ca8e19cd4cd42566455fd2730158ba70613fcd661b32e4a2c61d68996c1b9ececb3af42d7e5d57dab53d1b36e5ddbe421a670eb700a3f0cb80da4c31b5c6d281a4db29ce98c1cb775ab294304745b43733c422fce4f7c4be6cd11acbfb8d3c2d41bec69663cf8bde9e03f4b5b946320dd48c3878aadaaf157b31879541010dde9227d88a74cfb65b49f5767b30995a585b0c8416028b56416bd822d75cb12bde85e5f887f384c501a65649421a1d14353553fc8c62053e913bd18667b9adf7cb3c70f83264e1141666a215491a862ba97c6f49a66516c16e776b668165dd5286ac9e6e23f37d3cf03effc4c99681dd8e6aaec39389361b23e784f87182a007fe4409902a83379a4b065c3ecd9c6efb802a4845d47c66485622458d11a9f5a518ae766693f5dd01e60e271e7cc330af4229aa37ae1176ee69261f4c29f00f30e4648225d2ee6376e13783aa6e4a58932bd4d280e8392394a2024310ddc0b630cdba314f54d014116e77c5c3bfee2c5ef933969e39b0d0aad696b6318fa0336f3b77ed18b69cc340d32f658dd0a336149928a6a8c3639fbf9826d4002bfbffc4aaa4102fcd6a87c0587c26ff51b316849bc60bc7ce45abed4966beb6607ddcecd16c6afb4d84f81c0bd8d1d3be6ba924a0154e30369e08d0537b3780b51944bc458f4e22d76b7b0fb57f952825cc8dd8c3b61e63ebc987997bb419d3e622045b4951d9abf34870077daf80cf2fd79aff41b561f3f0aca70af37162c2375a194037c86e596d1a12954b0b6d4d4b578f7ad51c4a3c50513ed86b7be71450310be367c952b779f7d5ad59ce0df48de29b709df604bd2aaaf3939c9182462646f77f5da9fe9fddbc5e89e9f1d4c622267b26920d77976a97b4b6d77bd06f3fdb7ceb2a2427c40c8718ab6003a1ed275d6e8579a276a4296a8d9ed1ad7ba7339785c7b974526531852f171a4abb144771a036f87ed70d14b53f463d2996f2eadeef43d64a9c923b9dc18a8b5d6b746fa6afdac16da4d3a628241d973d507724bf7977c6d7edc8b50654541a48f1a2b15e63ad074213642552b1cc6b8d926c84d6f86c5ea9ae9667709e893fc20d5bfdf3363980ad4e661df87711434f35e888dddf663bc2bda458e1b0bd61a596bbdccd85c2bca71204ce73db811cb671feb328ba1617738a6e2fcd9e2f075b30a0bad21e9a5e068ce640a0030994deb68f873dfa99c4a7962f3062353ea9f8d05fd28542779995ffd31c4404b4ac3f8ee66017cb93c5186799aac4fe8a5d22607abf14d46bd5e5736571d17f5fdbdd269e42ea0bc859828cd17ec66557d9f19c2aa1ac9bf53a9e6529d1196d5b88d50db27de129ce2bed38d69dbdf2fd56d1173de8877ce8c6530c489821319eeb24a315eb52ae766b606979073d0ccb211a6ac402a06d70a13c54c5ec7afe592d9ea1131e512771d0cebd230a38927cf41f9b6b84325a717cdc135dd7effe786dc9cae017a5fba89beb161482ea1522e45421f28f7b7a02f44251b21438a9264bc52189cb520ad9e97049738100a1de97bb30f17dcc25d77627a75709d6c2bf3d57ec27b2803eb0b780b915ade657122d4c4f369b96cbd76d38b00ccb07b9fbd58a4007ff5ced3ed95fc0197cca4dff82a0b00f54b46ccc000516ac12ea8e3e43e278779be5ddcb20bf3fef73ddbe78a72c48eeb8e2f476207e0058bb8e20f90b884b9b3bd2f6ecff13d2fe237dbf5024547b58c128c391ffae099e622d225e02581caf40f54d6bb7b89bd32eb64883289f8dd942afc5fe084ab4a8b3fec890228d76f2c2b2366b6be0273602a09f4ed81b9d28348695fdf35033cf9567d30eef31decefcbd1a9dadd9355b62e81469a5b1754acf4eb41f33bbc04a8c57a3cd99b9575942b7fa96a5cc5d2a4be7a"], 0x12ac}, {&(0x7f0000001640)={0x120, 0x2e, 0x200, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8f, 0x2, 0x0, 0x0, @binary="5d1fadfef0e26c43678590f0cdae4788c84deee46c8a7d53fbe9221520ccdc0c8bfe60632082ff2f805aa144a6d8481fafb1760575ccdcc9cc8a1e9055ddc95d0c4b59df66efb0bb9026bd3df0df94539b4ca76e0a88e036370a52e3b7e48170ba1ab4351e493958af3e96cef646e605d4cb4ac93eb948d9d0d173c88852678b2dd8937fbaf0becd6d6029"}, @generic="cceb00c82a59ae341cf197c3d6127503c854d72bee7ae51ccc9356b5411cf6c8bb1532116767f10e766beb7954fb95325cf1ac436879b2a54f85ffba63fb82d1660b88b7ba6b277d03a26d80a7f1cc07320cab647ea88bd471fb89f562dbc7f3c4e819b972dfeda37dfbaa8e79852449e1095544e36f", @typed={0x8, 0x96, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x120}, {&(0x7f0000001780)={0x3d0, 0x33, 0x2, 0x70bd25, 0x25dfdbfd, "", [@nested={0x2c5, 0x72, 0x0, 0x1, [@typed={0xda, 0x8d, 0x0, 0x0, @binary="18ddb3becc61d38f551a26f75d9c0b27264d731e85289e8edb0ad1d885b86e05b61c4c02c2283182ba3f8c193c13a70525360bf7e79c2d17f858ec86e52f199721d68abd96d7483f31ef14439275b5d157d276b8aa3aea66b8d6a454f245e26741f7360f07e37c2a63812068417b3bf1a955fc55e48c471690415fface2ab711bc192398a8f1ab3b9d2c1a29b7c2db077cb196c8a3446e4f5472cf99a30da78a09a56cd56e72960d8e447ed15fc2bbfdf601e17037a3cee1c069ea755f236002dd36bf84c52a09dbb95e9890c7a882a4909069c4a772"}, @generic="a0ba3ebf6fde7c3ec4cc697e01885fbfa87bf1d236863964838770e449d4c9c3ab75b5c8fe0aea5cc882865b7f9df477c0e426f48317ce952a0fc9592046e7d53ee66559150bbafe9cd92487b1f02b9eb592436d66193dcf01f2a98c23", @typed={0xc, 0x2f, 0x0, 0x0, @u64=0x1}, @generic="c950433c65f0013d7a6d51686ffc6fdff3d8e5100278c5ddff99e071f4b89c8d89d663fffc1c761580485f92bbc13177674f474f063c7394b59ebd5d198a58c9b161595890a43cd31356755e0c64518f487c8139a8f37c79c12152788a41eb35a5ab19116fdee1d15a50538e62a0e4fac0ee568b7613291348d728b2444cabe23e70f556bcf48a7a28fd78cf5961b919fb8b4a79e8b018482430ceef01c96e54784e6cc271cb1a43fbe74fa1db79", @generic="9b6f6eb6ba503fac43702aeddff3624349d0bf97d1534fcecb48248f461b7a5b0629b8b2b6834404b9b67a27965166f9a9a08f71309655e3db31c8d59081a4e36f29d7df76e466da06103907aa22bbefb720ed0f3c05218dcfa24fb404d041079325195443a3bf09dc41e0bd8923663d90e30d374fece46228376f4cff8a7413414469b5196878d8a97ae14dfb4d4bb47af64d753c476a7b52ccd5557176deafe17bf179672ff96aeb9fb590fb799521bd3253917a6a3523fb0bb83061e64028ea8d", @generic, @typed={0x8, 0x48, 0x0, 0x0, @fd}, @typed={0x4, 0x72}]}, @generic="cc1637f0b16e7e5d2f20f85cdd84566c65b79cc076501251eb57c968c166a9d39cce90d814f8d523deeddeab410388ce48432047eb77b7dd7bfc67ae06b3e85fff50add519b045b0ca5ef0414c5e61fc0e65af48e96176f583db74e666656de8eb1a2661e91055fecf52f94801ecb91a9d6b1139ea18a59a000371f8a523f63c224309ea803c4cbf213d2b292aa585b2cfcf56387acb5307054ce1b1ad103c4fc9a0e81f3e2bbb840cde20402ef31de1e17aa4a966bb530fb200db6d6d07ce34cb565769ce046c0071ccef6f168cea8a9cc97d953937d1883e245c289c838a3083a860c51cb53138c99b505d080ac0b8aa4faa2b7898"]}, 0x3d0}], 0x3, &(0x7f0000001c00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r3, r0, r3, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r5]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r8}}}], 0x70, 0x80}, 0x4000)
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000000c0))
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd=r3, 0x0, 0x0, 0x3f, 0x0, 0x0, {0x0, 0x0, r0}}, 0x1)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0xa}, 0x9)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000000)

17:12:28 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000012240)={0x0, 0x0, &(0x7f0000012200)={&(0x7f0000000000)=@newtaction={0x70, 0x2d, 0x7, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x9}, @TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

17:12:28 executing program 4:
perf_event_open(&(0x7f0000001900)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, 0x0, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x18c, 0x148, 0x1000000, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x3, 0x1, 0x2]}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)

17:12:28 executing program 1:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x9cb}, &(0x7f0000148000/0x3000)=nil, &(0x7f00005ef000/0x3000)=nil, &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f00000000c0)=0x307e, 0x0, 0x4)
r3 = socket$inet(0x2, 0x6, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in}, 0x0) (async)
io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x300000000000500)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)

17:12:28 executing program 0:
perf_event_open(&(0x7f0000001900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0xf903, 0x18c, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@dev, @multicast2, 0x0, 0x0, 'gretap0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1\x00', 'bridge0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0)

17:12:28 executing program 5:
r0 = syz_io_uring_setup(0x186, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x1}, &(0x7f0000148000/0x2000)=nil, &(0x7f0000149000/0x4000)=nil, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0) (async, rerun: 32)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xe) (async, rerun: 32)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) (rerun: 32)
ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f00000000c0)) (async, rerun: 32)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xe) (async, rerun: 64)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0)) (async, rerun: 64)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/keys\x00', 0x0, 0x0) (async)
r6 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0x7)
setuid(r7) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2000)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="acdbdf25080032007abb0000c8003a80403a3a2a188c2a21f23a93fa0ea7dc4d46c8728ae4e143db4f0a02660d5a8deb81909264c4daa97716e75fec4159e5ec75645a68395d8664e169b4092a6f98d5690a005f007465616d3000000014006c00000000000000000000000000000000010c000d000700000000000000b8650a92d4791b2cd4485dc780b01da19642b5c4f5f43fd89b3d5fa7e5df92657dc8e9e31a7006f772323d6a542a3a027b2eb21fb1efe8f381029012f7f570dfebc4d3b6a7413cc5b272fe52533f7acf3e37dfa6a8597108005600", @ANYRES32=0xee01, @ANYBLOB="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