n_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/910/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0
21:02:08 executing program 4:
unshare(0x6c060000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
unshare(0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) (async)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000a40)=@delchain={0x6c8c, 0x65, 0x800, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0xc}, {0x0, 0xffed}, {0x5, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x40}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x5, 0x3}}, @filter_kind_options=@f_rsvp6={{0xa}, {0x6c08, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x400, 0x80, 0x8}, {0x6, 0x7, 0xa4}, 0x62, 0x0, 0x3}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xa29, 0x1, 0x4b6f}, {0x8b, 0xff, 0x20}, 0x29, 0x20, 0x3f}}, @TCA_RSVP_POLICE={0x8c0, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xdd3, 0xffffffffffffffff, 0x9, 0x80000000, 0x80000001, {0x9, 0x1, 0x8001, 0x6, 0x6, 0x1}, {0x1, 0x1, 0x3f, 0x9, 0x4a7f, 0x8001}, 0x3ff, 0xb2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x6, 0xfffffffa, 0x9, {0x20, 0x0, 0x800, 0x1f, 0x0, 0x10001}, {0x3f, 0x0, 0x3, 0x80, 0x81, 0x8}, 0x5, 0x40800000, 0x816}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0xff, 0x536238aa, 0x1, {0x80, 0x0, 0xea, 0x9, 0xbd7, 0x80}, {0x63, 0x2, 0x8, 0x2, 0x40, 0x21a0}, 0x92, 0x3fbf}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x6, 0x0, 0x5, 0x8, 0x4, 0xd7, 0x4, 0x90, 0xcc5, 0x8, 0x4, 0x101, 0x101, 0x6, 0x9, 0x2f, 0x7fff, 0x4, 0xc17, 0x1, 0x7ff, 0x4, 0x8000, 0x9, 0x40, 0x8, 0x80000000, 0x6d1, 0x200, 0xfff, 0x4, 0x0, 0x400, 0x9, 0x3, 0x40, 0x8, 0x6b6c, 0x9, 0x80, 0x26, 0x3, 0x3, 0x400, 0x81, 0x7, 0x2, 0x3, 0xbb, 0x200, 0x9, 0x5, 0x9, 0x1ff, 0x3, 0x1, 0x1, 0x1f, 0x401, 0x80000000, 0x3, 0x3, 0x20, 0xddeb, 0x6, 0x8, 0x2, 0x9f, 0x5, 0xa5, 0x4, 0xfffffff7, 0x4, 0x7, 0x3, 0x4, 0x6d, 0x3, 0x1, 0x3, 0x6f, 0x3, 0x9, 0x3, 0x9, 0x9, 0x5, 0x1, 0x80, 0x9, 0xffff7fff, 0x9, 0x4, 0x80000001, 0x0, 0x0, 0x7f, 0x496, 0x9, 0xfffffc00, 0x9, 0x6, 0xffff, 0x5, 0x7, 0x2, 0x1, 0x1, 0x2, 0x3, 0x8001, 0x9, 0x5, 0x3, 0xdf, 0xfffffffe, 0x2, 0x4, 0x0, 0x3f740, 0x7ff, 0x5, 0xfffffffa, 0x6, 0x9, 0x8, 0x4, 0xbc, 0x1000, 0x769, 0x10001, 0x6, 0x400, 0xa1, 0xfe, 0xfffffffa, 0x0, 0x1, 0x0, 0x7fff, 0x5, 0x0, 0x7ff, 0x9, 0x9, 0x2, 0x7f, 0xfffff000, 0x10001, 0x40, 0x8001, 0x7, 0x10001, 0x6, 0x1, 0xffff, 0xff, 0x9, 0x200, 0x8000, 0x8000, 0x3, 0x1000000, 0x4, 0x9, 0x10a, 0x6, 0x5, 0x0, 0xff, 0x8, 0x7, 0x209, 0x7, 0x800, 0x9, 0x1, 0x400, 0x9, 0x7fffffff, 0x0, 0x6, 0x7ff, 0x8, 0x5, 0xff, 0xffffffff, 0x289d, 0x0, 0x101, 0x1, 0x3ff, 0x5, 0x80000001, 0x4bb, 0x6e0f, 0x2, 0x6, 0x0, 0x8000, 0x3, 0x4000000, 0x1, 0x3, 0x100, 0x1, 0x1, 0x7f, 0x3f, 0xdff40112, 0x2, 0xc7, 0x20, 0xffffffff, 0xe1, 0xa57, 0x1f, 0x5, 0x8, 0x401, 0xffff, 0x5, 0x7, 0x3, 0xfffffff7, 0xd5a1, 0x3ff, 0x8001, 0x1, 0xffff437c, 0xfffffff7, 0x10000, 0x6, 0x6, 0x9, 0x3ff, 0x4, 0x81, 0x8, 0x7, 0xffffffc0, 0xd688, 0x6, 0x4, 0x400, 0x9, 0x101, 0x2, 0x5, 0x6, 0x6, 0x8001, 0x7, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xae, 0x3, 0x5, 0x7fffffff, 0x8, 0x80000000, 0xffffffff, 0x0, 0x94, 0x11, 0x3ff, 0xffffffed, 0x6, 0x1, 0x8, 0x7fff, 0x1000, 0x1, 0x7ff, 0x7f, 0x6a, 0x4, 0x36, 0x7ff, 0x7, 0xffffffe0, 0x2, 0x4, 0x0, 0x6, 0x1000, 0x2, 0x6, 0x725, 0x7, 0xffff, 0x6, 0x7fff, 0x5, 0x3, 0xa64d, 0x7e20, 0xff, 0x2, 0x2, 0xff, 0xffffa5bc, 0x401, 0x7f, 0x80000000, 0x0, 0x5dc, 0x3, 0x9, 0x1a4, 0x8, 0x1f, 0x26, 0x100, 0x7ff, 0x7, 0x3, 0xfadb, 0x20, 0x6, 0x40, 0x8f, 0x3f, 0x0, 0x3, 0x1, 0xa512750, 0x80000001, 0x0, 0xffff0000, 0x2, 0x1ff, 0x1, 0x9, 0x1, 0x80000000, 0x9, 0x300000, 0x8, 0x4, 0x0, 0x5, 0x5, 0x800, 0x9, 0x0, 0x3, 0x6, 0x4, 0x80000000, 0x7, 0x83, 0x80, 0xb89, 0x6, 0xee6, 0x8000, 0x8000, 0xfffffff7, 0xfffffffc, 0xda, 0x8, 0x80, 0x3, 0xffff, 0x3, 0x100, 0x9, 0x20, 0xfff, 0x1, 0x0, 0x1, 0x4, 0x6, 0x8, 0x8000, 0x5, 0x7, 0x8, 0x2, 0x4, 0xd, 0x7ff, 0x80000001, 0x2, 0x101, 0x100, 0x0, 0x8, 0x1, 0x1, 0x8, 0x9, 0xbb, 0x85, 0x10000, 0x0, 0x7fffffff, 0x80, 0x8001, 0xffffffff, 0x6, 0x9, 0xfffffffc, 0xffffffc0, 0x101, 0x100, 0x1, 0x407a, 0x6, 0x3, 0x9, 0x2, 0xffff, 0x1f, 0x2, 0x401, 0x6, 0xa1, 0xaee1, 0x3f, 0xfff, 0x40000000, 0x2, 0x5, 0x1, 0x3, 0xfb7, 0xffffff74, 0x4, 0x810000, 0x6, 0x0, 0x80000001, 0x400, 0x80000000, 0x5, 0x5d7, 0x9, 0x4, 0x800, 0x3, 0x8, 0x8629, 0x1f, 0x3, 0x8001, 0x43, 0x3, 0x101, 0x1, 0x6, 0x14df, 0x2, 0x20, 0x8, 0x1ff, 0x3f, 0xffff, 0x3, 0x6, 0x5, 0x0, 0x90, 0x1, 0x9, 0x8, 0x4, 0xfffeffff, 0x69, 0x9f2, 0x1, 0xea, 0x20, 0xfffffffa, 0x6, 0x7ff, 0x8, 0x9, 0x81, 0x80, 0x3f, 0x8, 0x4, 0x9, 0x4, 0x9, 0x75ca, 0x80, 0x3, 0xc6f, 0x1, 0x3, 0x8810, 0x7fff, 0x8, 0x25a4, 0x0, 0x8000, 0x1, 0x1f, 0xfff, 0xffffffff, 0x3f, 0xed, 0x6, 0x0, 0x4, 0x2]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x10}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0x6}}, @TCA_RSVP_ACT={0x62c0, 0x6, [@m_ipt={0xe4, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0xba, 0x6, "f2a5b303bb736daab0cf2d3709e637a32a9fbfd5ca6048841ebcf73cdcc366bffc41c68519eb904346a3edc6ec5d952ded9ab52c59478cbf6de2886552af47eeffddba1a35ac5e955e2e9ae7d1ca0c230b255c14651813edc4e16968ad2584e3c2bec65840e011a64f6cd663b51af6f2bc44fce40ae1d8c0675e977f8face9305784a8c5c079e3c6a0ab6de3d4c284210fdbb4438a78600ef0c1eec97e99bb9e52a0e8836796913fd0ecfb806ec89c8d7a72e105ff60"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x6910278979d2523}}}}, @m_csum={0x10f4, 0xd, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6d6e, 0x7, 0x0, 0x308a, 0x42e0}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0xfffffffe, 0x2, 0xffffffff, 0xff}, 0x4d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x2, 0xffffffffffffffff}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffff7f, 0xfffffffa, 0x5, 0x3ff, 0x1}, 0x2b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x401, 0x8, 0x4, 0xff}}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x80, 0x2, 0x8, 0x2}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd5c, 0x7, 0xffffffffffffffff}, 0x5c}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0xd7581166ce8edc34}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x3f90, 0x1c, 0x0, 0x0, {{0xb}, {0x3ee8, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x3, 0x800, 0x9, 0x240, 0xc235, 0x9, 0x7, 0x7, 0x3, 0x3, 0x8, 0xffffffff, 0x5, 0x23, 0x9, 0x9, 0x81, 0x7fffffff, 0x4c, 0x5, 0x291, 0x7, 0x6f, 0x80000001, 0x20000000, 0x3, 0x2b5, 0x0, 0x7, 0x2, 0x7fff, 0x8, 0x200, 0xffffffff, 0x9, 0x80000000, 0x7, 0x9, 0x0, 0x1, 0x3, 0x81, 0x6, 0x7, 0x10000, 0x7, 0x80000000, 0x1, 0x4cb, 0xc350, 0x2ad1, 0x1, 0x3f, 0x4c, 0x3ff, 0x55d0, 0x53, 0x2, 0x8, 0x2, 0x4, 0x4, 0x7f, 0x3, 0x1020, 0x8, 0x6, 0xb8, 0xfff, 0x1, 0x3, 0x8, 0x5bc9, 0x7ff, 0x0, 0x5, 0xeac, 0x7f, 0x5, 0x3, 0x0, 0x3, 0x8, 0x9, 0x80, 0x3ff, 0x9, 0x7, 0x8, 0x8001, 0x5, 0xe000, 0x2, 0x8, 0x100, 0x9, 0x10000, 0x6, 0xfffffffa, 0x6, 0x3, 0xf1, 0x4, 0xfffffffb, 0x1, 0x1f, 0x7ff, 0x4080, 0x6, 0x3, 0x942, 0x1, 0x1, 0x80, 0x101, 0x7fffffff, 0xa54, 0x1, 0x7d, 0x1, 0x4, 0x8, 0x8, 0x7fffffff, 0x25e, 0x7, 0x7, 0x10000, 0x7fff, 0x40, 0x9, 0xfff, 0x80000000, 0x53, 0x80, 0x8, 0x6, 0x2, 0xf6, 0x8, 0xfffffff8, 0x4, 0xffff8001, 0xffffffe0, 0x10000, 0x7, 0x81, 0x9, 0x5, 0x3ff, 0xffff, 0x7, 0x2, 0xe26491e, 0x6, 0xabf8, 0x4, 0x1, 0x1185, 0x400, 0x3, 0x1c00, 0x5, 0x5, 0x0, 0x1, 0xb8a60000, 0x7, 0x2a3, 0x7fff, 0x2, 0x4, 0x2, 0xba72, 0x2, 0x9, 0x8001, 0x1, 0xfcb, 0x3, 0x5, 0x1, 0x6, 0x6, 0x8, 0xee6, 0x2, 0x600, 0x7fff, 0x5, 0x81, 0x7, 0x9, 0x800, 0x4, 0x5, 0x0, 0xe36f, 0x0, 0x9f, 0xffff, 0x31, 0x7, 0xc9e, 0xffff, 0x101, 0x0, 0x80000000, 0x7, 0x8, 0xc5c, 0x2, 0x58f, 0x6, 0x40, 0x7ff, 0x5, 0x7, 0x8, 0x81, 0x4, 0x2, 0x0, 0x5, 0x1f, 0x0, 0x27, 0xffff8000, 0x1000, 0xca77, 0x7, 0x101, 0x1, 0x188d, 0x5, 0x8, 0xffffffff, 0xe77, 0x139363e, 0x100, 0x8, 0x20, 0x43, 0x0, 0x9, 0x8, 0x6, 0x7, 0x2, 0x6, 0x7fff, 0x3, 0x8000, 0x800, 0x7f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x8, 0x72b0, 0x38, 0x7c8, 0x4, 0x8000, 0x2, 0x2, 0x8000, 0xd1, 0x3ff, 0xf78f, 0x3, 0xa90c, 0xdd6, 0x1000, 0x1, 0x1e600000, 0x4, 0x2, 0x5, 0x5, 0xfff, 0x6, 0x8, 0x80, 0x5, 0x0, 0x1, 0x6, 0x4, 0x81, 0x2, 0x3c6, 0x800, 0x0, 0x0, 0x8, 0xfff, 0x8000, 0x4, 0x2729, 0x5b1, 0x100, 0x51dfc120, 0x80000000, 0xffffffc1, 0x9, 0xfff, 0x1, 0x0, 0x8, 0x20, 0x79f9, 0x1, 0x3ff, 0x5, 0x7, 0x24, 0x5, 0x3, 0x400, 0x7fff, 0x81, 0xad57, 0xe967, 0xfff, 0x81, 0x6, 0x4, 0x9, 0x7493e6af, 0x1f, 0x10000, 0x1656, 0x0, 0x9def, 0x1, 0x1, 0x4, 0x2, 0x4f6d, 0x1, 0x200, 0x0, 0xfffffffb, 0x800, 0x0, 0x7ff, 0x1, 0x0, 0x4, 0x0, 0x9, 0x35, 0x9827, 0x0, 0x8001, 0x0, 0xff, 0x6, 0x8, 0x3, 0x4, 0x5, 0x80000001, 0xffffffff, 0x2, 0x9, 0x1, 0x4d0, 0x2, 0x8, 0x2, 0x9, 0xffffff81, 0x800, 0x0, 0x10000, 0x6, 0x10001, 0x6, 0xfffff000, 0x101, 0x1ff, 0x538, 0x2, 0x3, 0x0, 0x1, 0x2, 0x1, 0x5bbd, 0x8, 0x7, 0x2, 0x9, 0x8001, 0x101, 0x2, 0x0, 0x81, 0x1, 0x7ff, 0x6, 0xffff3e5c, 0x1, 0x0, 0x0, 0x80, 0x9, 0xfffffffe, 0x80000001, 0xffffffc1, 0xffffffff, 0x5c86, 0x7, 0x426d8c74, 0x75cb, 0x5, 0xffffffff, 0x6, 0x7, 0x1, 0x1ff, 0xfff, 0x6, 0x1, 0x1, 0x5, 0xa0, 0x7e2, 0xffffffff, 0x1000, 0xa2b, 0xd7bf, 0x3, 0x8001, 0x1000, 0x9, 0x7, 0x0, 0x5, 0x7, 0xfff, 0x7, 0xb48, 0x7, 0x1000, 0x20, 0x5, 0x7, 0x2, 0x6, 0xfffffff8, 0x1, 0x9, 0x80000000, 0x3, 0x3, 0x6, 0x8001, 0x9d, 0x2, 0x2, 0x10001, 0x5, 0x8db, 0x53b, 0x8000, 0x3, 0x0, 0x6c11, 0x6, 0x56ea91c4, 0xed1, 0x3fe0000, 0x3, 0xdf, 0x7, 0x2, 0x9, 0x200, 0x4, 0x39b8000, 0x0, 0x1, 0x9, 0x10000, 0x6982b557, 0x3e9, 0x8, 0x114, 0x1, 0x3, 0x0, 0x4, 0x79abd897, 0x7, 0x2, 0xd04, 0x5, 0x3, 0x5, 0x7f, 0x2, 0x7, 0x6, 0xfffffffc, 0x6, 0x86f, 0xf6c, 0x5, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6d3, 0x5a, 0x3ff, 0x9, 0x2, 0x30000, 0x0, 0x4, 0x0, 0x2, 0x9, 0x3, 0x4, 0x61, 0x8000000, 0x5, 0x4, 0xfffffffb, 0x4, 0x7, 0x5, 0x5, 0x2db, 0x6, 0x0, 0xfffffffc, 0x0, 0x2, 0x10001, 0x400, 0x81, 0x2, 0x4, 0x4, 0x2, 0x7, 0x19, 0x1, 0xcb4, 0x6, 0x200, 0x9, 0x55b2, 0x8887, 0x8, 0x3, 0xca0, 0xae, 0x9, 0x0, 0xfffff801, 0x7, 0x6, 0x7, 0x8, 0x8, 0x7ff, 0x6, 0x200, 0x7, 0x80000000, 0x6, 0x800, 0x1, 0x8000, 0x116, 0x3ff, 0xe8, 0x6, 0x2, 0x3, 0x7, 0x911, 0x6, 0x0, 0x2, 0x8, 0x6, 0x7, 0x8001, 0xcb, 0x2, 0x9, 0x1, 0x3, 0x1, 0x6, 0x1, 0x7, 0x8, 0x10000, 0xed65, 0x2, 0x8, 0x1929bd3e, 0x45, 0x4, 0x1c7, 0xffff7fff, 0x5, 0x96, 0x20, 0x9, 0xff, 0x8, 0x5, 0xf6c, 0xf84, 0xffffff00, 0x3a7, 0x70, 0x7ff, 0xcbb3, 0xccb, 0xd4e, 0xffffffff, 0x3, 0x4, 0xfff, 0x7, 0x0, 0x7, 0x6, 0x2, 0x6, 0x9, 0x8, 0x2000000, 0x9, 0x1ff, 0x7, 0x2, 0x0, 0x1, 0xa50, 0x0, 0x8, 0x17a, 0x6e2, 0x7fffffff, 0x3, 0x9a88, 0x7, 0x6, 0x80000001, 0x1, 0x1ff, 0x1, 0x6, 0x67, 0x80000000, 0x1, 0xfffffffc, 0x0, 0x1, 0x81, 0x7, 0x6, 0xfffffffb, 0x8, 0xd65a, 0x1215, 0x1000, 0x20a5447f, 0x2, 0x1c4, 0x6d, 0x4, 0x1, 0xcc, 0x9bf, 0x133d, 0x81, 0x9, 0x81, 0x7, 0x4d, 0xdb5a, 0x7, 0x4, 0x5, 0x1000, 0x7f, 0x5, 0x7, 0x5, 0x2, 0x3, 0x7, 0x1200000, 0x2, 0x81, 0x9, 0x7fff, 0x2, 0x5, 0xffffff01, 0x1, 0x1ff, 0x4c, 0x9, 0xfffff2a8, 0x401, 0x7, 0x8, 0x5, 0xffff, 0x3, 0x401, 0x6a, 0xfffffffa, 0xffff, 0x1, 0x8, 0x3, 0x81, 0x32c, 0x4, 0x901, 0xfffffff9, 0x81, 0x1, 0x8, 0x499, 0x4, 0x9a, 0x8, 0x8, 0x10001, 0x6, 0x7fff, 0x1ff, 0x4, 0xd0e5, 0x100, 0x4, 0x631, 0x1, 0x2, 0x6, 0x5, 0x40, 0xffffff00, 0x10001, 0x4, 0x3, 0x7, 0x7, 0x3ff, 0x9, 0x4, 0x8000, 0x819f, 0xfb, 0x10000, 0x26]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x81}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x4, 0xfeb, 0x2d6d, 0x99f, {0x6, 0x1, 0x7, 0x7, 0x1ff, 0x3}, {0xff, 0x0, 0x5, 0x8, 0x8}, 0x6, 0x9ea, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffc, 0x8001, 0x5, 0xfffffff9, 0x40, 0x0, 0x2, 0x2569ac35, 0xffffffd5, 0xffffffb4, 0x5, 0x1, 0x8, 0xfffffffe, 0x2de, 0x80, 0x5, 0x5, 0x4, 0x83a, 0x8, 0x7, 0x9, 0x4, 0x1000, 0x0, 0x5, 0x6, 0x1ff, 0x3, 0x0, 0x0, 0x3, 0x8, 0x2491, 0x58e, 0x8, 0x80000000, 0x80000000, 0x800, 0x8, 0xff, 0x81, 0x1, 0x0, 0x3f, 0x80000001, 0x9, 0x200, 0x200, 0x35672915, 0xfffffffb, 0x8, 0x200, 0x4, 0x4, 0xff65a8fa, 0x1ff, 0x0, 0x9, 0x2, 0x3, 0xffffff0d, 0x2, 0x576, 0x1000, 0x5, 0x3ff, 0x9, 0x2, 0x800, 0x7, 0x3, 0xdf, 0x4, 0x1f, 0x20, 0x9, 0x8000000, 0x9c00000, 0x6, 0x42, 0x9, 0x7, 0xfffffffd, 0x264f8, 0x9, 0x7, 0x3f, 0x7, 0x80000000, 0x7, 0x7ff, 0x1000, 0x6, 0x6, 0x8b0b, 0x8, 0x2, 0x3, 0x1, 0x11, 0xef, 0x7fff, 0x20, 0x8, 0xffff, 0x3, 0x0, 0x4, 0x4, 0x1, 0x4, 0x40, 0x2, 0x52, 0xc65e, 0x9f, 0x81, 0x80000000, 0x20, 0x4, 0xd8, 0x8, 0xedde, 0x3, 0x10000, 0x1, 0x80000001, 0x80000000, 0x1000, 0xae, 0x8, 0x0, 0x7, 0x6d5856d6, 0x1, 0x56d7, 0xfffffffb, 0x3, 0x200, 0x8001, 0x7f, 0x8, 0x10001, 0x9, 0xcb, 0x1ff, 0x5, 0x8, 0xf4dc, 0x5, 0x1004, 0x100, 0x0, 0x0, 0x8000, 0x9, 0x6, 0x7, 0x2, 0x400, 0xfffffff9, 0x8000, 0x80000001, 0x4, 0x6, 0x8, 0x5, 0x6, 0x9, 0x0, 0x2, 0x1, 0x6, 0x9, 0x0, 0xd5, 0x4, 0x7, 0xce1b, 0x6, 0x0, 0x8, 0x3f, 0x9, 0x6, 0x400, 0x6, 0x0, 0x7f, 0x7, 0x1e, 0x8, 0x389cc81f, 0x3, 0x5, 0xe7, 0x6, 0x5, 0x6, 0xffffffff, 0xf15, 0x8cd, 0x19, 0x100, 0x6, 0x7, 0x81, 0x9, 0x8, 0x9, 0x200, 0x1, 0x0, 0x7, 0x8001, 0x4, 0x4, 0x4dd4a2f7, 0x8, 0x1, 0x2, 0x20, 0xff, 0xca, 0x10001, 0x1, 0x9, 0x1, 0x2, 0xffffffff, 0x1, 0x3, 0x30, 0xc0316eb, 0x3, 0x1000, 0x3f, 0x800, 0x1ff, 0xac71, 0x6, 0x1, 0x1, 0x3, 0x0, 0x8, 0x7e3c, 0x6, 0x7, 0x2d5, 0x3b5, 0x8c8, 0x8, 0x1ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x748760ab, 0x6c1, 0x4ae, 0x9, 0x3, 0x2, 0x9, 0x80000000, 0x3, 0xe, 0x9, 0x279, 0x2, 0x7fff, 0xc9, 0x7fff, 0x6, 0x5, 0x200, 0x0, 0x10000, 0x2, 0x45e3, 0x7dbe, 0xfffffeba, 0xd116, 0x2, 0x8, 0x9, 0x0, 0x1, 0x5, 0x2, 0xa109, 0x9, 0x40, 0x0, 0x4, 0x2, 0x81, 0xdc56, 0x3f, 0x7, 0x2d, 0x7fff, 0x4, 0x100, 0x80, 0x4, 0x6, 0x2, 0x91, 0x2ffb, 0x2, 0x2, 0x98b8, 0x8001, 0x6, 0x6fc, 0x7, 0x8, 0x8, 0x7, 0x7ff, 0x20, 0x0, 0x76c, 0x4, 0x8003, 0xbbc, 0x2, 0x9, 0x1, 0xfff, 0x8, 0x9, 0x1000, 0x1, 0xffffffff, 0xe17, 0x8, 0xfffffaf7, 0x0, 0x3, 0x1, 0x2, 0x2, 0x2, 0x69, 0xffff0001, 0x4, 0x9, 0x4, 0xffff0000, 0x7fffffff, 0x3f, 0x20, 0x5, 0x8, 0xffff3ec3, 0x37, 0x100, 0x80000000, 0xfffffb84, 0x8000, 0x8ac9, 0x80000001, 0x3ff, 0x9, 0xfffffe01, 0x0, 0x40, 0x100, 0x80000000, 0x20, 0x7, 0x2b9b, 0x0, 0x2, 0x3, 0x5, 0x5, 0x62b22020, 0x7, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x3, 0x8, 0x3, 0x400, 0x4, 0x8, 0x80000001, 0x4, 0x1f, 0x1, 0x2, 0xfff, 0x7, 0x7ff, 0x1, 0x8000, 0xd99, 0x200, 0x1f, 0x1000000, 0x7fff, 0x4, 0xa61, 0x3ff, 0x4, 0x8, 0x71, 0x80, 0x9, 0xffffffff, 0x9, 0x10001, 0x3, 0x2, 0x4, 0x4, 0x40, 0x0, 0xffffffff, 0xa, 0x8, 0x0, 0x9, 0x80000000, 0xfff, 0xff, 0x20, 0x8, 0x8001, 0xffff, 0x5, 0x400, 0x6, 0x4, 0xfffffff7, 0x6, 0x4, 0x10001, 0x2, 0x200, 0x6, 0x1b8, 0x5, 0x80000001, 0x7, 0x800, 0xc1, 0x4, 0x0, 0x8000, 0x9, 0x1ff, 0x7223, 0x2, 0x1, 0x2, 0x81, 0x20, 0x9, 0x47b2, 0x9, 0x9, 0x472df59, 0x8001, 0x101, 0x7, 0x5, 0x80000000, 0xc4, 0x8, 0x9, 0x33, 0x8, 0xc6, 0x4, 0x9, 0x9, 0x1, 0xfff, 0x7, 0x226, 0x0, 0x9, 0x3, 0x4, 0x1, 0x3ff, 0x81, 0xf0, 0x6, 0x6d, 0x0, 0x9, 0x3, 0x7, 0x7fffffff, 0xa878, 0x1db3f47a, 0x4, 0x3, 0x3, 0x3f, 0x40, 0x0, 0xd1, 0x6d86]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8001, 0x8, 0x0, 0x40, 0xffffff3c, 0xffff, 0x7184, 0x1, 0xa8fe5a4f, 0xbd, 0x5, 0xa08e, 0x3, 0x5, 0x1, 0xf26, 0x460, 0x2, 0x9b, 0x2, 0x7, 0x4, 0x2, 0x101, 0xaf0c, 0xfa2, 0x5, 0x20, 0x10000, 0x49, 0x400, 0x800, 0x7ba9, 0x7, 0x7f, 0x5, 0x3, 0x3, 0x4, 0x880e611, 0x4, 0x9, 0x729, 0x8, 0xfff, 0x7, 0x6, 0xf9ea, 0x2, 0x4, 0x7fff, 0x4e, 0x4, 0x6, 0x20, 0x20, 0x400, 0x81, 0x6, 0x7, 0x64c, 0x6, 0x40, 0x4, 0x8, 0x6, 0x10001, 0x8000, 0x7fffffff, 0x40, 0x1, 0xe4, 0x9, 0x7, 0x7f91, 0x5, 0x1f, 0xffff, 0x400, 0x6, 0x3, 0x8, 0x8, 0xe8e, 0x2, 0x7fff, 0xcb7f, 0x400, 0x5, 0xd5f5, 0x4, 0x0, 0x8, 0x7f, 0x9de2, 0x6, 0x7275, 0x8, 0x9, 0x800, 0x2, 0x1, 0x5, 0x8, 0xf64, 0x2, 0x0, 0x9, 0xfffff399, 0x7fff, 0x8000, 0x7, 0xba, 0x6, 0x40, 0x7, 0x3ff, 0x3, 0x3ff, 0x9, 0x1f, 0xe296, 0x6, 0x57, 0xfff, 0x81, 0xa97, 0x8, 0x1225, 0x1f, 0x0, 0x0, 0x0, 0x8, 0x40, 0x6, 0xfc, 0xae, 0x5, 0xc4, 0x2, 0x9, 0x7, 0x6, 0x1000, 0x28, 0x40, 0x1, 0x400, 0x80000000, 0x0, 0x5, 0x10000, 0x7f, 0x3f, 0xeb68, 0xb4, 0xeb, 0x10000, 0x658, 0x7, 0x7, 0xcef8, 0x3, 0x6, 0x3, 0x2, 0x2, 0x1e, 0xe40, 0x1, 0xfec, 0x3, 0xffffffff, 0x10000, 0x7f, 0x8, 0x5, 0x7fff, 0x80, 0x8, 0x0, 0x2, 0x2, 0x1, 0xfffff001, 0x20ad, 0x8, 0x400, 0xef, 0xfff, 0x3, 0x6, 0x401, 0x5, 0x8, 0x1, 0xfffffffd, 0x1000, 0xe350, 0x7fffffff, 0x7f, 0x4, 0x9, 0x3f, 0x40, 0x8, 0xfffffbff, 0x68, 0x7, 0x8, 0xf4f, 0x0, 0x20, 0x1, 0xcae, 0x3, 0x80, 0x0, 0x0, 0x10000, 0x7, 0x7, 0xe1, 0xdb, 0x80, 0xfffffffb, 0x6, 0x200, 0xfffffffe, 0x7, 0xbf9e, 0x356fcc6, 0x9, 0x9, 0x3, 0x4695, 0xb1, 0x5c, 0x6, 0x7c76, 0x0, 0x8, 0x10001, 0x6, 0xff, 0x0, 0xc99, 0x5, 0x6, 0x81, 0x2, 0xfffffc00, 0x8000, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0x3, 0x6, 0x5, {0x3, 0x0, 0x0, 0x6, 0xbf54, 0x4}, {0xfe, 0x1, 0x900, 0x9, 0x3}, 0x9, 0x1, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb7}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x6c9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x5, 0x9, 0x0, {0x0, 0x1, 0x7ff, 0x8, 0x5, 0x5cf}, {0x1c, 0x2, 0x7fff, 0x401, 0x4, 0x8}, 0x5, 0x0, 0x7}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80000001}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x525, 0x11, 0x9, 0x401, 0x40, 0x6, 0x1, 0x8001, 0x8, 0x7, 0x6, 0x1cae8, 0x8, 0x7, 0x377b, 0x7f, 0x0, 0x4ef, 0x5b3, 0x6, 0x8, 0x10001, 0x7, 0x0, 0x4, 0x40, 0x832, 0x3, 0x3, 0x5, 0x7, 0x10000, 0xfffffffc, 0x17, 0xc0, 0x5, 0x81, 0x5, 0x8, 0xfffffffa, 0x0, 0x8, 0x20, 0x1, 0x9, 0x10001, 0x2, 0x4, 0x100000, 0x8, 0x7, 0x3, 0x8, 0x6, 0x35, 0x4, 0x9, 0x0, 0x8, 0x401, 0xfffffff9, 0x4, 0x6, 0xbc, 0x7, 0x0, 0x9, 0x7, 0x393, 0x0, 0x5, 0xfff, 0x40, 0x9, 0x2e8f202a, 0x1a, 0x0, 0x0, 0x43500000, 0xba, 0x5, 0x7b9a2741, 0x7, 0x606, 0xfc9c, 0x2, 0x8, 0x5, 0x3ff, 0x2, 0xffffc88f, 0x6, 0xe19d, 0x7, 0x40, 0xed, 0x7, 0x80000001, 0x9, 0x3, 0x5, 0x101, 0x5, 0xffffffff, 0x80, 0x0, 0x80, 0x8, 0x6, 0x20, 0x1, 0x4, 0x5, 0x81, 0x7, 0xffffff8a, 0x9, 0x5, 0x44a4516e, 0x6, 0x2, 0x800, 0x1f, 0x4, 0x2, 0x2, 0x101, 0x3ff, 0x21, 0x8001, 0x6, 0x0, 0x8, 0x6, 0x6, 0xffffffff, 0x1000, 0x3, 0x3, 0x7ff, 0x8, 0xdb, 0x3, 0x2, 0x1, 0x4, 0x6, 0x10001, 0x0, 0x921, 0x8, 0x1f, 0xffff, 0x1ff, 0x1, 0x1, 0x7, 0x2ac8, 0x89, 0x6, 0x80000001, 0x6, 0x4, 0x0, 0x4, 0x5, 0x0, 0x9, 0x4, 0x78, 0x5, 0xec, 0x6, 0x2, 0x6, 0x8000, 0x100, 0x6, 0x800000, 0x51a6, 0xfff, 0x6, 0x1, 0xffffffff, 0x9d5, 0x1000, 0x5, 0x4, 0x101, 0x0, 0x81, 0x0, 0x66f, 0x1, 0x5, 0x40, 0x8, 0x3f, 0x4, 0x80000000, 0xfff, 0x7, 0x7fffffff, 0x7d1b2e07, 0x0, 0x9, 0x9, 0x80000000, 0x5, 0x5, 0x0, 0x1ff, 0x5, 0x81, 0x5, 0x7, 0x2, 0x8, 0x10000, 0x101, 0x6, 0xf1, 0x7, 0x1, 0x7ff, 0x5, 0x7fff, 0x1, 0x7f, 0x0, 0x6, 0xfffeffff, 0x2, 0x7fffffff, 0x401, 0xebf4, 0x10000, 0x9, 0xfffffffd, 0xfffffffc, 0x1ff, 0x3, 0x407, 0x6, 0x4, 0xfffffff9, 0x3, 0x800, 0x5, 0x7b92, 0x2, 0x5704bd43, 0xfffffffe, 0xc11, 0x8001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xfffffff9, 0x8, 0x3, 0x4, 0xbfd, 0x9, 0x9f53, 0x1, 0x9, 0xc4, 0x7, 0xd30, 0x3, 0x116, 0x2, 0x6, 0x3, 0x4bfd, 0x101, 0x101, 0x80, 0x7, 0x3, 0x27f3, 0xff, 0xffff, 0x101, 0x1, 0x101, 0x0, 0xdc7f, 0x80000001, 0x1ff, 0xfffffffc, 0x8001, 0x10000, 0x1f, 0x2, 0x6, 0x0, 0x5, 0x20000000, 0xffffffff, 0x4, 0x20, 0x7, 0x8, 0x81, 0x100, 0x8, 0x9, 0x80000000, 0x8001, 0x10001, 0x7fff, 0x6, 0x6050, 0x10000, 0x1, 0x1000, 0x523, 0x6, 0x21, 0x7, 0x3, 0x9, 0x3e, 0x2, 0x1, 0xfffffffc, 0x1f, 0xa1c, 0x5, 0x101, 0xfffffffe, 0x4, 0x5, 0xffff, 0x9, 0x9, 0x8, 0x800, 0xf3e2, 0x800, 0x3, 0xeb, 0x5, 0x0, 0x1, 0x1ff, 0x9, 0x6, 0x3, 0x1, 0xff, 0x4748, 0x5, 0x925, 0x5, 0x6, 0xfff, 0x7, 0x1f, 0x7f, 0x9, 0x8000, 0x1, 0x2, 0x9, 0x1, 0x1, 0x4bbf, 0x2, 0x6, 0x800, 0x0, 0x2, 0x20, 0x89d, 0xd837, 0x81, 0x1ff, 0x0, 0xffffffff, 0xff, 0x1, 0x3, 0x6, 0x10, 0x7f, 0x6, 0x7fffffff, 0x1f, 0x0, 0x9, 0x0, 0x10001, 0x729, 0x8, 0x31, 0x7f, 0x3, 0x7fffffff, 0x3f, 0x2, 0x1, 0x5, 0x4, 0x5e9, 0x6, 0x4, 0x4, 0x9, 0x45b, 0x81, 0x6, 0x4, 0x8, 0x80000000, 0x40, 0x21, 0x8000, 0x8d0b, 0x0, 0x2, 0x4, 0x400, 0x61f5, 0xffffffff, 0x6, 0x80, 0xffff8443, 0x2, 0x1ff, 0x7, 0x800, 0x3, 0x3, 0xdb, 0x92, 0x9317, 0x3, 0xa79e, 0x6, 0x80000001, 0x519186ba, 0x3e, 0x1, 0x6, 0x40, 0x9, 0x7, 0x5, 0xffff, 0xcdc3, 0x3, 0xffff, 0x7fff, 0x3, 0xfffffff7, 0x1f, 0xffff, 0x4, 0x1ff, 0x3, 0x6, 0x1000, 0x1, 0x81, 0x200, 0x6, 0x69c000, 0x2, 0x9, 0x5, 0x0, 0x4, 0xf2, 0x800, 0x13, 0x5, 0x9, 0x10000, 0xffffffff, 0x8, 0x2, 0x54de570a, 0x4, 0x8, 0x8, 0x7f, 0xffff, 0x10000, 0x2, 0x1, 0xffff, 0x8001, 0x5, 0x101, 0x7, 0x10000, 0x91, 0xfff, 0x9, 0x1, 0x8, 0x9, 0x1ff, 0x0, 0x4, 0x5, 0x3, 0x200, 0x80, 0x800]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3ff, 0x79, 0x98, 0x8, 0x5, 0x7, 0x4bb7dcfe, 0x2, 0x3ff, 0xf8a9, 0x4, 0x0, 0x1f, 0x8, 0x800, 0x401, 0x8, 0xf38, 0xffff0001, 0x8, 0x9, 0x1f, 0xff, 0x2, 0x3, 0x8, 0x80000001, 0x3, 0x12d7, 0x9, 0x800, 0x6, 0x1, 0x9, 0x6, 0x101, 0xab, 0x5e37, 0xd9, 0x7d, 0x9, 0x8, 0x8, 0x8001, 0xffff8000, 0x7f, 0x347, 0xffff, 0x3, 0x4, 0xa42, 0x7, 0xed1, 0x1, 0x4, 0xffff, 0x9, 0x1, 0x3, 0x80000000, 0x6, 0x3, 0x2, 0x4, 0x7, 0x0, 0x81, 0x1, 0x8a6, 0xffff, 0x8, 0x0, 0x80, 0x5, 0x10000, 0xffff, 0x9, 0x8001, 0x3, 0x5, 0x22, 0x9, 0x7, 0x7fffffff, 0x3, 0x4, 0x5, 0x2, 0x3, 0x7, 0xfffffff8, 0xfd, 0x1, 0xdb3, 0x0, 0x1, 0x8000, 0xff, 0x20, 0xdce, 0x8, 0x5, 0x2, 0x89a, 0x5, 0x200, 0x0, 0x7ff, 0x7ff, 0xffffffc1, 0x8, 0x7, 0x19b0, 0x1, 0x40, 0x80000001, 0x4, 0x9, 0x0, 0x6, 0xd9, 0xff, 0x3, 0x5, 0x8, 0x8, 0x0, 0x80, 0x5, 0x80, 0x0, 0x7fffffff, 0x10000, 0x5, 0xfffffffb, 0x1, 0x3, 0x5, 0x1ff, 0x92, 0x2, 0x3e55, 0x5, 0x2, 0x200, 0x7fff, 0xffffffff, 0x9, 0x8001, 0x2, 0x7, 0x6, 0x4, 0xfff, 0x0, 0x1, 0x5, 0xe0, 0x2, 0x7, 0x401, 0xfffffffb, 0x7, 0x0, 0xffff, 0x8, 0xfffffffd, 0x8001, 0x800, 0xa811, 0x3, 0x3, 0x2, 0x400, 0x401, 0x3, 0x0, 0x93f, 0x8, 0x0, 0x8, 0xd62, 0x80, 0xffffffff, 0x9, 0x80, 0x1b2f, 0x3, 0xd40, 0xfffffffe, 0x3, 0x6, 0x3, 0x6, 0x2, 0x8, 0x6, 0xef, 0x2, 0x0, 0x1, 0x7, 0x20, 0x4, 0x4, 0xb262, 0x40, 0x40, 0x101, 0x200, 0x8, 0x8, 0x7f, 0xf5a1ef91, 0x0, 0xbf, 0x8, 0x7, 0x7fffffff, 0x5, 0xfffffffe, 0x3, 0x100, 0x9, 0x9, 0x8f7, 0x3f, 0x3281, 0x4, 0xedf0, 0x7, 0xa, 0x8001, 0x1, 0x7, 0x8, 0x1000, 0x3, 0x7, 0x80, 0x0, 0x0, 0x1, 0x2, 0x7, 0x4, 0x800, 0x8001, 0x8000, 0x8, 0x4, 0xfd85, 0x7, 0x3, 0x9, 0x84]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xcc, 0xba3, 0x9, 0x7, 0x9d, 0x1, 0x1, 0x9, 0x8, 0x43df, 0x800, 0x5, 0x1, 0x2000000, 0xfff, 0x80000001, 0x5, 0x7, 0x8000, 0xfffffff7, 0xfffffffc, 0x8000, 0xfffffff8, 0x8, 0x9, 0x3ff, 0x4542, 0x6, 0x401, 0x7, 0x800, 0x1, 0x6, 0x38, 0x2, 0x7, 0x7, 0xfff, 0x1a3c, 0x100, 0xfffffffc, 0x8, 0x7f, 0xff, 0x7, 0x2, 0x6, 0x7fffffff, 0x81, 0x1, 0x1000, 0xfffff135, 0x7, 0x80000000, 0x2, 0x8, 0xba98, 0x0, 0x7, 0x947b, 0x6, 0x5, 0x4, 0x0, 0x9c4, 0x80000001, 0xb4c3, 0x4, 0x6, 0x6, 0xce9a465, 0x0, 0x80000000, 0x9, 0x4, 0xcafa, 0x8, 0x7, 0x9, 0x0, 0x5, 0x9, 0x7, 0x8, 0x2, 0x4, 0xf287, 0x80000001, 0xb8, 0x9, 0x4, 0x0, 0x2, 0x8, 0x3, 0x9, 0x7, 0x0, 0x48f5, 0x20, 0x5, 0x7, 0xffffffbb, 0x0, 0x2, 0x9b, 0x1, 0x8000, 0x9, 0x0, 0x80000001, 0xfffffffd, 0x7fff, 0x1, 0x10000, 0x5, 0xffff0000, 0x7, 0xfffff800, 0x7, 0x100, 0x100, 0x2, 0x7, 0x8, 0x0, 0x8000, 0x6, 0x6, 0x0, 0x1, 0x86c, 0x4, 0x80000000, 0x0, 0xd0cf, 0x0, 0x7fff, 0x4, 0xfffffc9f, 0x8, 0x400, 0x8, 0xe9a, 0xd0, 0xd6c5, 0x9, 0x7, 0xffffff36, 0x3, 0x80, 0x6, 0x0, 0x2, 0x6, 0xfff, 0xffff, 0x1a9, 0x5, 0x9, 0x6, 0x1, 0x0, 0x7ff, 0x5, 0x3f, 0x0, 0x10001, 0xa000, 0x4, 0xfffffffe, 0x4, 0x5, 0x8001, 0x7, 0x5, 0x8, 0x6, 0x4, 0x9, 0x1, 0x7da, 0x6dd1, 0x63, 0x1, 0x7, 0x0, 0xff, 0xa6, 0x401, 0x2, 0x6, 0x1, 0x2, 0xe0, 0x1, 0x10001, 0x80, 0x100, 0x899, 0x5, 0x7fffffff, 0x6, 0x1, 0x7f, 0x2, 0x9, 0x3, 0x3, 0xfff, 0x1, 0x3, 0x1, 0x1ff, 0x4, 0xfffffffa, 0x1f, 0x4, 0x8, 0xffff7fff, 0x5, 0xfff, 0x3, 0x0, 0x401, 0x45f, 0x7, 0x2, 0x9, 0x9, 0x81, 0x9, 0x7fffffff, 0x40, 0x9, 0x9, 0x9, 0x0, 0x1ff, 0x4, 0xfb, 0x3, 0x1ff, 0xca, 0x3, 0x5, 0x6c2, 0x6, 0x1, 0x1000, 0x6, 0x3, 0x9, 0x3, 0x1, 0x3ff]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x0, 0x7f800000, 0x3, 0x1ff, 0x9, 0x2, 0x20, 0x1, 0x8, 0x9, 0x8, 0x7, 0xba, 0x7f, 0x0, 0x3, 0x26310dca, 0x4, 0x6, 0xbc, 0x7, 0x7, 0xff, 0xdfe3, 0x6, 0x9, 0x9, 0x3, 0x1c7b, 0x5, 0x80000001, 0x100, 0x400, 0x80000001, 0x6, 0xef, 0x5, 0x0, 0x9, 0x4, 0x6, 0xffffffff, 0x21, 0x9, 0x0, 0x1000, 0xffff, 0x4, 0x1, 0x2, 0x34d, 0x100, 0x7, 0xfff, 0xd474, 0x5, 0x10001, 0x7, 0x6, 0x4, 0x80, 0x1, 0x4, 0xfffffc00, 0x1f, 0x3, 0x6, 0x200, 0x0, 0x4a2, 0x6, 0x100, 0x7fff, 0x7, 0x1, 0x3, 0x400, 0x401, 0x4, 0x0, 0x401, 0x280, 0x0, 0x8, 0x10001, 0x6, 0x3, 0x10000, 0x1, 0x7fff, 0x3, 0x3, 0x66, 0x187, 0x7, 0x8, 0x6, 0x1f, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0xfffffffb, 0x1, 0x1000, 0x10001, 0x7ff, 0x74b1, 0x5, 0xf5, 0x3, 0x6, 0x8000, 0x8, 0x5, 0x92c7, 0x5, 0x1, 0x1, 0x1ff, 0x348dfdc5, 0x3f, 0xf17, 0x144, 0x6, 0x8, 0x3, 0x0, 0x0, 0x0, 0x80000001, 0x6, 0x34b, 0x7fff, 0x3, 0x9, 0x6a, 0x7, 0x40000, 0x1000, 0x4, 0x995, 0x31fd, 0x40, 0x2, 0x80, 0x80000000, 0x2, 0x4, 0x800, 0x4, 0x8, 0x6, 0x800, 0x9, 0xfff, 0x1ff, 0x6ce5, 0x6, 0x1703, 0x80000001, 0x4, 0xbe0, 0xb33, 0x3, 0x193, 0x401, 0x3, 0x3, 0x1, 0x3f, 0x80000001, 0x9, 0xfffffffa, 0xc0, 0xffffff81, 0x8, 0x846, 0x40, 0x10001, 0x5, 0x7fffffff, 0x0, 0x3, 0x1, 0x5, 0x6bb7, 0x9, 0x6, 0x4, 0x400, 0x4, 0x80, 0x1000, 0x7, 0x101, 0x0, 0x80000000, 0xfffeffff, 0x8, 0x72, 0x8, 0x54, 0x7, 0x7f, 0x0, 0x7, 0xffff, 0x58, 0x6, 0x10001, 0xfffffbc5, 0x275b, 0x6, 0x80000001, 0x4, 0x0, 0x4, 0x10000, 0x2, 0x1000, 0xffffffff, 0x6, 0x3cf6, 0x6f, 0x433, 0x40, 0x9, 0x7fffffff, 0x27, 0xf7, 0x0, 0x12, 0x8d, 0x332, 0x2, 0x9, 0x1, 0x0, 0x4, 0x2, 0x0, 0x5, 0x9eedb895, 0x4, 0x7, 0x11, 0x3, 0x70000000, 0x4, 0x0, 0x87, 0xfffffff9, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf1a2, 0x1, 0x7, 0x6, 0x8, 0x6, 0xff, 0x9, 0x7, 0xffffffff, 0x2, 0x2, 0x6, 0x71, 0x0, 0x7, 0x81, 0x214, 0x8, 0x3f, 0x4, 0x10001, 0x7, 0x9, 0x17, 0x5, 0x5, 0x6, 0xfffffffc, 0x1, 0x80000001, 0xc0, 0x3ff, 0xa7c, 0x101, 0x8, 0x3, 0x5, 0x7, 0x9, 0x1, 0x20, 0x2, 0x3, 0x1, 0x0, 0x80000000, 0x7, 0x40, 0x2, 0x9, 0x81, 0x4, 0x3, 0x6, 0x0, 0x400, 0x2, 0x10000, 0x1, 0x6, 0x4, 0x1ff, 0xffffb05d, 0x9, 0x7, 0x1, 0x6, 0x1, 0x2, 0x2, 0x3, 0x3f, 0x8, 0x92b8, 0xff, 0xfffffffd, 0x4, 0x5, 0x101, 0x0, 0xc35, 0x5, 0x6, 0x1ff, 0x0, 0x2, 0xffffffff, 0x400, 0x800, 0x51, 0x20, 0xc, 0x80000000, 0x7, 0xffffffff, 0x1, 0x1, 0x3, 0xfffffac7, 0x5, 0x9, 0x1, 0x7c, 0x80000000, 0x3, 0x18c, 0x5, 0x0, 0xa9b00, 0x7, 0x0, 0x8, 0x3, 0x2, 0x3, 0x800, 0x8, 0x6, 0x80000001, 0x4, 0x80, 0x100000, 0x3f, 0x7, 0x3, 0x1, 0x9, 0x47a91d60, 0x22, 0x3f, 0x5, 0x6, 0xe3b, 0x1ff, 0x9, 0x1f, 0x40, 0xa1, 0x7e, 0x3, 0x3, 0x4, 0x9, 0x4a58, 0x1, 0xffff, 0x7, 0x200, 0xf0b, 0x5, 0x3, 0x1, 0xcd69bcc3, 0x8000, 0x800, 0x80, 0x2, 0x8, 0x4, 0xfffffbff, 0x0, 0x2, 0xfffffff7, 0x2, 0x5, 0x6, 0x400, 0xa38b, 0x32d5, 0x9, 0x70, 0x5, 0x7c, 0x0, 0xff, 0x8001, 0x1, 0x7, 0x8, 0x1, 0xce, 0xef, 0x5, 0x3, 0x6, 0x83f4b046, 0x1d, 0x7, 0x1f, 0x8, 0x800, 0xfffffffb, 0x11b, 0xeb62, 0xfc000000, 0x7357, 0x4, 0xff, 0x1ff, 0x9, 0x400, 0x8, 0x1, 0x6, 0x7, 0xff, 0xf0000000, 0x36, 0x6, 0x2, 0x3, 0x800, 0x101, 0x4, 0x9, 0x7, 0xec000000, 0xd1, 0x4, 0x1ff, 0x1f, 0x1, 0x3795, 0x2, 0x100, 0x0, 0x77a, 0x3, 0x1, 0xfffffffa, 0x200, 0x8001, 0x2, 0x1f, 0x9, 0x0, 0x6, 0x5, 0x3, 0x8, 0xc0000000, 0x3d, 0x4, 0xffffffff, 0xfffffff7, 0xf94d, 0xc2, 0xfff, 0xd57c, 0x3, 0x8e2, 0x8e, 0xb7f1, 0x4d4, 0x2]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000000}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x0, 0x4, 0x1ff, 0xff, 0x9, 0x8, 0x8, 0x7, 0x7fffffff, 0x7fffffff, 0x80, 0x9, 0xffffffff, 0x8, 0x8, 0x5, 0x3, 0x3f, 0x4, 0xfffffffb, 0x3, 0x9, 0x9, 0xfff, 0x20, 0x2, 0x7fff, 0x0, 0x8, 0x3, 0xfff, 0x153, 0x4, 0x3, 0x80000000, 0x469d, 0x8, 0x8, 0xffffff7f, 0x9, 0x9, 0x40, 0x3, 0x100, 0x2, 0x80000000, 0x200, 0x80000000, 0x200, 0x0, 0x4, 0x8000, 0x1000, 0x7fff, 0xffff1864, 0x0, 0x1, 0xcd, 0x9, 0x1, 0x9, 0x0, 0x6, 0x8, 0xe3, 0xfffff16d, 0x3dd, 0x82d, 0x200, 0x3, 0xff, 0x9, 0x0, 0x10001, 0x20, 0x70, 0x8, 0xff, 0x5, 0x1, 0x638, 0x3f, 0x1ff, 0x3, 0xfff, 0x1f9, 0x80000001, 0x4, 0x1ff, 0x8da1, 0x20, 0x401, 0x0, 0x101, 0x81, 0xff, 0x2, 0x80000000, 0x0, 0xffffffff, 0x9, 0x0, 0xb3, 0x100, 0x400, 0x80000000, 0x719, 0x5b, 0xfff, 0x7, 0x0, 0x5, 0x4d3, 0x6, 0x3, 0x7, 0x6, 0xdf56, 0x8, 0x3, 0xffffff81, 0x1, 0x8000, 0x2, 0x6, 0x9, 0x3, 0x1, 0x9, 0x3, 0x7fff, 0x2, 0x10000, 0xff, 0x4000800, 0xac, 0x0, 0x7ff, 0x0, 0x80000000, 0x9, 0x2, 0x2, 0x40, 0x1, 0x1, 0x6, 0x1, 0x1, 0x7f, 0x3, 0x9182, 0x8, 0x0, 0x4, 0x0, 0xef, 0xffff420c, 0x1, 0x3f, 0x6, 0xffff, 0x0, 0x10001, 0xffff8001, 0x9, 0x101, 0x731, 0x6, 0x200, 0x1b2, 0x748c, 0x7fff, 0x3, 0x80000001, 0x4, 0x1, 0x40, 0x7, 0x7f, 0x4, 0x40, 0x80, 0x0, 0x41e2, 0x3, 0xfffffffe, 0x2, 0x9f0, 0x90, 0x40, 0x8, 0x9, 0x80, 0x92, 0x800, 0x6, 0x2, 0x0, 0x4520, 0x8, 0x400, 0x3, 0x1, 0x8, 0xcc, 0x7fffffff, 0x80, 0x6, 0x1, 0xb373, 0x1, 0x3f, 0x8a4e, 0x65c, 0x5, 0x7, 0x2b64, 0x0, 0x1000, 0x2, 0x1, 0x1, 0x7, 0x969, 0x3, 0x1ff, 0x4, 0xbb, 0x6, 0x2, 0x16f, 0x81, 0xfffffff7, 0xea81, 0x0, 0x10001, 0x3, 0x0, 0x40, 0x9, 0x5, 0x8, 0x200, 0x80, 0x21c00, 0x9, 0xb88, 0x7, 0x8, 0x7f, 0x5, 0x6, 0x4d, 0x1c7]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x0, 0x92, 0x401, 0x0, {0xcd, 0x0, 0xf43, 0x6, 0x1ce3, 0xfe}, {0xe1, 0x3, 0xad, 0x6, 0x3, 0x3}, 0xd1b, 0xd005, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x90, 0x3, 0x2, 0x7, 0x8001, 0x0, 0xfffff89e, 0x3ff, 0xffffffff, 0x9, 0x9, 0x1b00000, 0x1000, 0x7, 0x5, 0x4, 0x10001, 0xfda7, 0x7, 0x800, 0x101, 0xe2, 0x5, 0x9, 0x0, 0x40, 0x3, 0x811, 0x0, 0x100, 0x8, 0xffff8001, 0xffff7fff, 0x1, 0xfffffffb, 0x0, 0x6bc3, 0xb91c, 0x7fff, 0x0, 0x0, 0x8000, 0x6693, 0xfffffffa, 0x2, 0x3, 0x81, 0x5, 0x7ff, 0x1, 0x40, 0x2, 0x8, 0x5, 0x20, 0x9, 0x1, 0x1, 0x0, 0x9, 0x37, 0x8, 0x7, 0x6ac00000, 0x2, 0x2, 0x7, 0x6, 0x6, 0x7fff, 0x9a8, 0x5, 0xffffffff, 0x7fffffff, 0x7, 0x100, 0x9, 0x5, 0x7e, 0x5, 0x3f800, 0x2fb, 0x0, 0x3, 0x3, 0x3f, 0xfffffff7, 0x3ff, 0x40, 0x99, 0xe00, 0xf2d, 0x3df13cb0, 0x6, 0x0, 0x1ff, 0x0, 0x43c, 0x1, 0x5, 0x4, 0x100000, 0x6, 0x1, 0x8, 0xffff, 0x61a, 0x0, 0x0, 0x800, 0x1f, 0x5c, 0x1ff, 0x8, 0x6, 0x8000, 0xffff, 0x9, 0xffffff3e, 0x3e3c, 0xffffffff, 0x15, 0x3, 0x1, 0xb21, 0x10000, 0x10001, 0x1, 0x5, 0x6, 0x3, 0x100, 0x401, 0x0, 0x101, 0x40, 0x3, 0x7, 0x7, 0x8000, 0x8856, 0x8, 0xcef5, 0xc0000000, 0xfffff000, 0xfc4, 0x5, 0x0, 0x4, 0x6, 0x6, 0xf5, 0x400, 0x1, 0x1, 0x49, 0x2, 0x101, 0x0, 0x5, 0x4, 0x1, 0x33d, 0x100, 0x80000000, 0x6, 0xc08b, 0xa161, 0x9e20, 0x3, 0x7, 0x2, 0x2, 0x9, 0x0, 0x7fffffff, 0x5ae, 0x7fff, 0x0, 0xfffffbff, 0x2d5a, 0x7, 0x1, 0x8, 0x1, 0x9, 0x0, 0xfffffff8, 0xf8e, 0x2, 0x0, 0x80000000, 0x3, 0x7fff, 0xe6f, 0xe82b, 0x7a1f, 0x8, 0x6, 0x3, 0x77e8, 0x0, 0x7, 0x2, 0x5, 0x1, 0x0, 0xffffff0a, 0x2, 0x0, 0x10000, 0x7, 0x9, 0x8001, 0x7, 0x4, 0xfffff800, 0x6, 0x6, 0x1000000, 0x7, 0x3, 0x80, 0x80, 0x8, 0x80, 0x0, 0x3, 0x2, 0x2da, 0x57, 0x3, 0x4, 0x3314, 0x6, 0x3, 0x0, 0x6, 0x6, 0x6, 0x1, 0x3, 0x4, 0x3, 0x1000, 0x10000, 0x1ff, 0xae93, 0x8001, 0x7fff, 0xffffffdc, 0x1, 0x3d0, 0x9, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x101, 0x0, 0x6, 0x3f, 0x6, {0x8, 0x2, 0x4, 0x9, 0x0, 0x7}, {0x20, 0x1, 0x0, 0x6, 0xf001, 0x7}, 0x5, 0x3, 0x80}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x81}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x1586e858e074251d, 0xd70, 0x60000, 0xae, {0xfb, 0x0, 0x0, 0x7, 0x2, 0xfffffff9}, {0x9, 0x0, 0xfc, 0x0, 0x401, 0x100}, 0x8, 0xffffffe1, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x10000}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x54fc, 0x5, 0x3, 0x1, 0x1, 0xffff, 0x0, 0x80000001, 0x100, 0x3, 0x9, 0x4, 0x8, 0x1, 0x4, 0x4, 0x80000000, 0x800, 0x1, 0x67, 0x6, 0x9, 0x400, 0x9, 0x5, 0x6, 0x1, 0x7fff, 0x7fffffff, 0xd98, 0x8000, 0x2, 0x10000, 0x800, 0x5, 0x3ff, 0x101, 0xfffffffe, 0x6, 0x5, 0x9, 0x6, 0x5, 0x80, 0x800, 0x7fff, 0x2, 0x7fffffff, 0x6, 0x3, 0x9cd, 0x100, 0x6, 0xffff, 0x0, 0x7ff, 0x10001, 0x71d, 0x7fff, 0x2, 0x100, 0x5, 0x400, 0xc5, 0x2a, 0x20, 0xed, 0x0, 0x7, 0x400, 0x0, 0x101, 0x0, 0x1f, 0x7fffffff, 0x5, 0x5, 0x0, 0x47a84669, 0x9, 0xe0, 0x3, 0x5, 0x1, 0xffffffc0, 0x9, 0x2, 0x3, 0x3, 0x7, 0x7ff, 0x0, 0x8000, 0x5, 0x7, 0x9, 0x1, 0x2, 0x400, 0x5, 0x50da9e14, 0x5, 0x1000, 0x3, 0x3ff, 0x0, 0x7, 0x0, 0x5, 0x40, 0x1, 0x400, 0x7, 0x10000, 0x5, 0xfffffff8, 0x14b, 0xa000000, 0x1000, 0x7, 0xfea6, 0x1, 0x4, 0x3f0a, 0xff, 0x0, 0x4, 0x1, 0x70, 0x2, 0x6b7, 0xb9f, 0xffff, 0x9, 0x7, 0x80, 0x8, 0x2, 0x1000, 0xfffffff9, 0x9, 0x4, 0x6fa2f05f, 0x27d, 0x783498aa, 0xfffffffc, 0x86b8, 0x2, 0x8001, 0x100, 0x7498, 0x6, 0x4, 0x74666501, 0x3, 0x200, 0x5, 0x80, 0x5, 0x0, 0x80, 0x6, 0x7fffffff, 0x5, 0x5, 0x9, 0x9, 0x1, 0x7, 0x7, 0x4, 0x10001, 0x81, 0x6, 0x1ff, 0x7, 0x622a, 0x8001, 0x7f, 0x0, 0x5, 0x800, 0x3, 0x0, 0x106, 0xfffffffe, 0x24000, 0x3dfe, 0xfc03, 0x6, 0x3, 0x3, 0x900, 0xca, 0x4, 0x7, 0xff6, 0x9, 0x590, 0x7, 0x3c3b, 0x0, 0x4, 0x6, 0x3, 0x2b9c, 0x2a6642b7, 0x8, 0x1, 0x3, 0x0, 0x7ff, 0x4d2, 0x0, 0x2, 0x2, 0x0, 0x8000, 0x87, 0x7, 0x0, 0x0, 0x6, 0x200, 0x80000001, 0x0, 0xff, 0x0, 0x7, 0x1, 0x7eb0, 0x80, 0x9, 0x3f, 0x3ff, 0x0, 0x0, 0x80000001, 0x10040000, 0x8000, 0x7, 0xfffffff9, 0x5, 0x5, 0xffff, 0x7fff, 0x4, 0x3, 0x7, 0x80000001, 0xf6, 0x6a96, 0x4, 0x2, 0x80]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0xfffffff8, 0x200, 0xfffffc00, {0x36, 0x1, 0x1, 0x7, 0x0, 0x8001}, {0x9, 0x1, 0x8, 0xd6f, 0x7ff, 0x5}, 0x9, 0x8, 0xff}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff67}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff01}]]}, {0x80, 0x6, "e9ed90255a35be3d163bb1e7efb953a75794f67c718cf4f1da0c8f8a211d08f8dda26339e082791b97e0015b0016b2bd4c4ed8c199b14f5604a2ae865eac53482bbd59d3ccdce1aa9f1134dd8c2cce9b87e4e4039b0bf0e8b011bb4c4cd1ab87821c7cf9431a69b6200d761b90ccf70c0b515e4cee4c19ec6611d2bb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xe4, 0x7, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc, 0x3, 'devlink\x00'}]}, {0xa9, 0x6, "8dfc8db03ac42079679b03fa01d8fd41dcb3f764770b285ebb8f6e4bf6ac097b143ba5d3f64d0bbaae8811f7a487cd6ebd7893be7dd4ac0579dceff1325efef87f6ceaae144bb43b93bd283c9f14e416429f371d156215723aa16b02a52c78ad254925fa959ad408aa32d4cbae8ea5291c8fc1e363566a573b977b9180ae47454db2dbaae4a4992b3c32a8c1f1bdc341c67446cbf1dcaf955013d61462cec8ecead0db94e6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x1070, 0x2, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x1, 0x4, 0xffff, 0x75}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x0, 0x6, 0x5c, 0x101}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x101}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6}}}}]}, @TCA_RSVP_SRC={0x14, 0x3, @local}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x42f, 0x7fffffff, 0x5}, {0x9, 0x3f, 0x1}, 0x6, 0x0, 0x81}}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0x7}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0x6c8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES64=r1, @ANYRESOCT=r1], 0x34}}, 0x4000000) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0) (async, rerun: 64)
r5 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x18c, r6, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4811}, 0x40095) (async, rerun: 64)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)=0x10001, 0x0, 0x0) (async, rerun: 64)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x0, @private}}) (async)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

21:02:08 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0xbc020000, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:08 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev={0xfe, 0x7e}, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:08 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x6, 0x9e, 0x3, 0x7ff, 0xfffffffffffffff8]}, &(0x7f0000000080)=0x1f)
unshare(0x40000000)
mmap(&(0x7f00004f5000/0x2000)=nil, 0x2000, 0x3, 0x4010, 0xffffffffffffffff, 0x0)
getsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
unshare(0x40000080)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

21:02:08 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005002300000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:08 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv6_getaddrlabel={0x78, 0x4a, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x10000}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x20000010)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x1000006, 0x10, r0, 0x10749000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async)
ioctl$SIOCAX25ADDFWD(r0, 0x89e1, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default}) (async)
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x90, r6, 0x8, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x100}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000080}, 0x20000001)
ioctl$SIOCAX25ADDFWD(r5, 0x89e2, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r10=>0x0}) (async)
r11 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r9)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="04000100", @ANYRES16=r11, @ANYBLOB="00082cbd7000fddbdf25040000000900030073797a300000000014000200626f6e645f736c6176655f3100000000050004000100000005000400010000000900030073797a30000000000900030073797a320000000014000200766c616e3100"/106], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70078000000"], 0x2c}}, 0x40880)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r12, r7, 0x0, 0x10000a006)

21:02:08 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  631.618550][T23166] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:08 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0xc0020000, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:08 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv6_getaddrlabel={0x78, 0x4a, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x10000}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x20000010) (async, rerun: 64)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async, rerun: 64)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x1000006, 0x10, r0, 0x10749000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25ADDFWD(r0, 0x89e1, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default})
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x90, r6, 0x8, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x100}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000080}, 0x20000001)
ioctl$SIOCAX25ADDFWD(r5, 0x89e2, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r9)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="04000100", @ANYRES16=r11, @ANYBLOB="00082cbd7000fddbdf25040000000900030073797a300000000014000200626f6e645f736c6176655f3100000000050004000100000005000400010000000900030073797a30000000000900030073797a320000000014000200766c616e3100"/106], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70078000000"], 0x2c}}, 0x40880)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r12, r7, 0x0, 0x10000a006)

21:02:08 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005002300000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:08 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  631.764999][T23180] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:08 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000702000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  631.909500][T23186] netlink: 'syz-executor.5': attribute type 4 has an invalid length.
21:02:09 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$nl_route(r2, &(0x7f00000006c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@ipv6_getaddrlabel={0x78, 0x4a, 0x1, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x10000}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @local}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x78}, 0x1, 0x0, 0x0, 0x81}, 0x20000010)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x1000006, 0x10, r0, 0x10749000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
ioctl$SIOCAX25ADDFWD(r0, 0x89e1, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default})
r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x90, r6, 0x8, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x100}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10000080}, 0x20000001)
ioctl$SIOCAX25ADDFWD(r5, 0x89e2, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r9)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="04000100", @ANYRES16=r11, @ANYBLOB="00082cbd7000fddbdf25040000000900030073797a300000000014000200626f6e645f736c6176655f3100000000050004000100000005000400010000000900030073797a30000000000900030073797a320000000014000200766c616e3100"/106], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b70078000000"], 0x2c}}, 0x40880)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r12, r7, 0x0, 0x10000a006)

21:02:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0xcd000000, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x3}, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:09 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r10, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendfile(r6, r11, 0x0, 0x8000000000000001)

21:02:09 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000703000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:09 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x6, 0x9e, 0x3, 0x7ff, 0xfffffffffffffff8]}, &(0x7f0000000080)=0x1f) (async)
unshare(0x40000000) (async)
mmap(&(0x7f00004f5000/0x2000)=nil, 0x2000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) (async)
getsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
unshare(0x40000080)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) (async)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

21:02:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x79}, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:09 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000704000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  632.274917][T23204] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0xd40e0000, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  632.391992][   T27] audit: type=1804 audit(1668891729.166:626): pid=23208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/913/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0
21:02:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0xf4}, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:09 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000705000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  632.440407][T23219] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0xf8030000, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  632.576181][   T27] audit: type=1804 audit(1668891729.356:627): pid=23212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1552087229/syzkaller.QQeVPb/1021/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0
[  632.594080][T23224] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:09 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r10, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendfile(r6, r11, 0x0, 0x8000000000000001)

21:02:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:09 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x61, 0x6, 0x9e, 0x3, 0x7ff, 0xfffffffffffffff8]}, &(0x7f0000000080)=0x1f) (async)
unshare(0x40000000) (async)
mmap(&(0x7f00004f5000/0x2000)=nil, 0x2000, 0x3, 0x4010, 0xffffffffffffffff, 0x0) (async, rerun: 64)
getsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async, rerun: 64)
socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64)
unshare(0x40000080) (rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="390000001300094700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1) (async)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

21:02:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0xfa030000, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:09 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000706000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:09 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r9, r4, 0x0, 0x10000a006) (async)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r10, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendfile(r6, r11, 0x0, 0x8000000000000001)

21:02:09 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000707000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x2], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  632.864214][T23230] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:09 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r9, r4, 0x0, 0x10000a006)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r10, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendfile(r6, r11, 0x0, 0x8000000000000001)

21:02:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0xfc030000, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:09 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x3], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:09 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000708000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  633.049070][   T27] audit: type=1804 audit(1668891729.826:628): pid=23254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/915/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0
[  633.204176][   T27] audit: type=1804 audit(1668891729.976:629): pid=23256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1552087229/syzkaller.QQeVPb/1022/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0
21:02:10 executing program 4:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8943, &(0x7f00000002c0)={'erspan0\x00', 0x0})

21:02:10 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
connect$netlink(r0, &(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
splice(0xffffffffffffffff, &(0x7f0000000a00)=0x5d, 0xffffffffffffffff, &(0x7f0000000a40)=0x1, 0x6, 0x3)
ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f00000009c0)={0x4, &(0x7f0000000940)=[{0x0, 0x6c, &(0x7f0000000800)="c06431149e3b303c6f2d30ac3faa2025dda31bf158b30038098f43ad77ef11bb07d98171fea0563059adc0fae3d8b5ae53100b92be91d36682d10c869b15536e4bf4d3e50e5fdda324ab8850a341c69b595b8f49989c9a3b0bc08273d845a29a40a5b9398cf095736c835e6d", 0x1}, {0xffff, 0x1000, &(0x7f0000001500)="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", 0x1, 0x1}, {0x5, 0x71, &(0x7f0000000880)="e2078475ec599fb19f3267f0ea408a7fd8271c4b94deffcb879cb2f5d0f41cea1961ae429c1ddc8a0d2aa4fbd5c52514893bb68fa42efc607140ef9443c6ec66e95cd31b9123aa27bec577c18f68ff9e0ffe5056f113460e16fd4558395c614d6f34c9a4b736ae79f74a914662d8ffd1a2", 0x1, 0x1}, {0x8, 0x20, &(0x7f0000000900)="239bfb762aa2790b1ba2941494f4d8942b822225846cbe60b812a5872d411e2d", 0x1, 0x1}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r2)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xac, r11, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x619c4224}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x20)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r12, r5, 0x0, 0x10000a006)

[  633.585503][   T27] audit: type=1804 audit(1668891730.366:630): pid=23261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/916/cgroup.controllers" dev="sda1" ino=1163 res=1 errno=0
21:02:12 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
connect$netlink(r0, &(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
splice(0xffffffffffffffff, &(0x7f0000000a00)=0x5d, 0xffffffffffffffff, &(0x7f0000000a40)=0x1, 0x6, 0x3)
ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f00000009c0)={0x4, &(0x7f0000000940)=[{0x0, 0x6c, &(0x7f0000000800)="c06431149e3b303c6f2d30ac3faa2025dda31bf158b30038098f43ad77ef11bb07d98171fea0563059adc0fae3d8b5ae53100b92be91d36682d10c869b15536e4bf4d3e50e5fdda324ab8850a341c69b595b8f49989c9a3b0bc08273d845a29a40a5b9398cf095736c835e6d", 0x1}, {0xffff, 0x1000, &(0x7f0000001500)="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", 0x1, 0x1}, {0x5, 0x71, &(0x7f0000000880)="e2078475ec599fb19f3267f0ea408a7fd8271c4b94deffcb879cb2f5d0f41cea1961ae429c1ddc8a0d2aa4fbd5c52514893bb68fa42efc607140ef9443c6ec66e95cd31b9123aa27bec577c18f68ff9e0ffe5056f113460e16fd4558395c614d6f34c9a4b736ae79f74a914662d8ffd1a2", 0x1, 0x1}, {0x8, 0x20, &(0x7f0000000900)="239bfb762aa2790b1ba2941494f4d8942b822225846cbe60b812a5872d411e2d", 0x1, 0x1}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r2)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xac, r11, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x619c4224}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x20)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r12, r5, 0x0, 0x10000a006)

21:02:12 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x4], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:12 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000709000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:12 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0xffffe000, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:12 executing program 4:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8943, &(0x7f00000002c0)={'erspan0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8943, &(0x7f00000002c0)={'erspan0\x00', 0x0}) (async)

21:02:12 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
connect$netlink(r0, &(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) (async)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async, rerun: 32)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (rerun: 32)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async, rerun: 32)
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async, rerun: 32)
splice(0xffffffffffffffff, &(0x7f0000000a00)=0x5d, 0xffffffffffffffff, &(0x7f0000000a40)=0x1, 0x6, 0x3)
ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f00000009c0)={0x4, &(0x7f0000000940)=[{0x0, 0x6c, &(0x7f0000000800)="c06431149e3b303c6f2d30ac3faa2025dda31bf158b30038098f43ad77ef11bb07d98171fea0563059adc0fae3d8b5ae53100b92be91d36682d10c869b15536e4bf4d3e50e5fdda324ab8850a341c69b595b8f49989c9a3b0bc08273d845a29a40a5b9398cf095736c835e6d", 0x1}, {0xffff, 0x1000, &(0x7f0000001500)="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", 0x1, 0x1}, {0x5, 0x71, &(0x7f0000000880)="e2078475ec599fb19f3267f0ea408a7fd8271c4b94deffcb879cb2f5d0f41cea1961ae429c1ddc8a0d2aa4fbd5c52514893bb68fa42efc607140ef9443c6ec66e95cd31b9123aa27bec577c18f68ff9e0ffe5056f113460e16fd4558395c614d6f34c9a4b736ae79f74a914662d8ffd1a2", 0x1, 0x1}, {0x8, 0x20, &(0x7f0000000900)="239bfb762aa2790b1ba2941494f4d8942b822225846cbe60b812a5872d411e2d", 0x1, 0x1}]}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0}) (async)
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r2)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xac, r11, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x619c4224}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x20) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r12, r5, 0x0, 0x10000a006)

21:02:12 executing program 4:
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8943, &(0x7f00000002c0)={'erspan0\x00', 0x0})

[  635.848488][T23274] recent_mt_check: 1 callbacks suppressed
[  635.848507][T23274] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:12 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x2}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:12 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x79], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:12 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070a000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:12 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xf4], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:12 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
connect$netlink(r0, &(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
splice(0xffffffffffffffff, &(0x7f0000000a00)=0x5d, 0xffffffffffffffff, &(0x7f0000000a40)=0x1, 0x6, 0x3)
ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f00000009c0)={0x4, &(0x7f0000000940)=[{0x0, 0x6c, &(0x7f0000000800)="c06431149e3b303c6f2d30ac3faa2025dda31bf158b30038098f43ad77ef11bb07d98171fea0563059adc0fae3d8b5ae53100b92be91d36682d10c869b15536e4bf4d3e50e5fdda324ab8850a341c69b595b8f49989c9a3b0bc08273d845a29a40a5b9398cf095736c835e6d", 0x1}, {0xffff, 0x1000, &(0x7f0000001500)="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", 0x1, 0x1}, {0x5, 0x71, &(0x7f0000000880)="e2078475ec599fb19f3267f0ea408a7fd8271c4b94deffcb879cb2f5d0f41cea1961ae429c1ddc8a0d2aa4fbd5c52514893bb68fa42efc607140ef9443c6ec66e95cd31b9123aa27bec577c18f68ff9e0ffe5056f113460e16fd4558395c614d6f34c9a4b736ae79f74a914662d8ffd1a2", 0x1, 0x1}, {0x8, 0x20, &(0x7f0000000900)="239bfb762aa2790b1ba2941494f4d8942b822225846cbe60b812a5872d411e2d", 0x1, 0x1}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r2)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xac, r11, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x619c4224}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x20)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r12, r5, 0x0, 0x10000a006)

[  636.020842][T23284] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  636.028847][   T27] audit: type=1804 audit(1668891732.806:631): pid=23276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/917/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0
[  636.132599][   T27] audit: type=1804 audit(1668891732.836:632): pid=23279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/917/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0
[  636.235304][   T27] audit: type=1804 audit(1668891732.836:633): pid=23279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/917/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0
[  636.311761][   T27] audit: type=1804 audit(1668891732.836:634): pid=23279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/917/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0
[  636.339651][   T27] audit: type=1804 audit(1668891732.836:635): pid=23279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/917/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0
[  636.368015][   T27] audit: type=1804 audit(1668891733.016:636): pid=23278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1040/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0
[  636.406430][   T27] audit: type=1804 audit(1668891733.096:637): pid=23291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1552087229/syzkaller.QQeVPb/1026/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0
21:02:13 executing program 5:
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
r3 = accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendfile(r3, r4, &(0x7f0000000280)=0x10001, 0x4)
write$cgroup_type(r2, &(0x7f0000000180), 0x9)
writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)="6fb6d8837d63fa805233d57016450a62def06f405d1985f46c07b18bb8a93d871f1269bd708c04e99c6057196f00696089dfa4b6fd0651c7858916fd4fe4a658e232f1aa27bb1bcf7a06e6e6df07121d98a57689f8cb2a6bb6a08c1d9e7d37b2368322371d116db8f5079b51aaee230af1ee", 0x72}, {&(0x7f0000000300)="37ac667c764f391ac5dbb253d4d4c3f9be422e829a6ca8363179b045bbaf9e4cf0a5acd0a3e26780d86e2ed13104b63c26e71465956c32014d05d866dd2e064446c6f48b399b11dfe9841a7b6597dd4e4195061401f009757f8d44078f387dcb0709c4542bbe524a2549424f1de1c8dc9c07c3478ace0905fca13e901e3ec4f01cfd350b9a41a3", 0x87}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x401c5820, &(0x7f0000000100))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x401c5820, &(0x7f0000000100))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
close(r7)
ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000001340)={{r8}, "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"})

21:02:13 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x3}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:13 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070e000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:13 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
connect$netlink(r0, &(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x20000000}, 0xc) (async)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
splice(0xffffffffffffffff, &(0x7f0000000a00)=0x5d, 0xffffffffffffffff, &(0x7f0000000a40)=0x1, 0x6, 0x3)
ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f00000009c0)={0x4, &(0x7f0000000940)=[{0x0, 0x6c, &(0x7f0000000800)="c06431149e3b303c6f2d30ac3faa2025dda31bf158b30038098f43ad77ef11bb07d98171fea0563059adc0fae3d8b5ae53100b92be91d36682d10c869b15536e4bf4d3e50e5fdda324ab8850a341c69b595b8f49989c9a3b0bc08273d845a29a40a5b9398cf095736c835e6d", 0x1}, {0xffff, 0x1000, &(0x7f0000001500)="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", 0x1, 0x1}, {0x5, 0x71, &(0x7f0000000880)="e2078475ec599fb19f3267f0ea408a7fd8271c4b94deffcb879cb2f5d0f41cea1961ae429c1ddc8a0d2aa4fbd5c52514893bb68fa42efc607140ef9443c6ec66e95cd31b9123aa27bec577c18f68ff9e0ffe5056f113460e16fd4558395c614d6f34c9a4b736ae79f74a914662d8ffd1a2", 0x1, 0x1}, {0x8, 0x20, &(0x7f0000000900)="239bfb762aa2790b1ba2941494f4d8942b822225846cbe60b812a5872d411e2d", 0x1, 0x1}]}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r2)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r8, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xac, r11, 0x400, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x619c4224}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x400}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x20) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r12, r5, 0x0, 0x10000a006)

21:02:13 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x1a9], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  636.524230][T23299] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:13 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x4}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:13 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070f000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:13 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x1c8], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:13 executing program 5:
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
r3 = accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendfile(r3, r4, &(0x7f0000000280)=0x10001, 0x4)
write$cgroup_type(r2, &(0x7f0000000180), 0x9)
writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)="6fb6d8837d63fa805233d57016450a62def06f405d1985f46c07b18bb8a93d871f1269bd708c04e99c6057196f00696089dfa4b6fd0651c7858916fd4fe4a658e232f1aa27bb1bcf7a06e6e6df07121d98a57689f8cb2a6bb6a08c1d9e7d37b2368322371d116db8f5079b51aaee230af1ee", 0x72}, {&(0x7f0000000300)="37ac667c764f391ac5dbb253d4d4c3f9be422e829a6ca8363179b045bbaf9e4cf0a5acd0a3e26780d86e2ed13104b63c26e71465956c32014d05d866dd2e064446c6f48b399b11dfe9841a7b6597dd4e4195061401f009757f8d44078f387dcb0709c4542bbe524a2549424f1de1c8dc9c07c3478ace0905fca13e901e3ec4f01cfd350b9a41a3", 0x87}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x401c5820, &(0x7f0000000100))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x401c5820, &(0x7f0000000100))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
close(r7)
ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000001340)={{r8}, "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"})
bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) (async)
openat$cgroup_ro(r0, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async)
accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async)
sendfile(r3, r4, &(0x7f0000000280)=0x10001, 0x4) (async)
write$cgroup_type(r2, &(0x7f0000000180), 0x9) (async)
writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)="6fb6d8837d63fa805233d57016450a62def06f405d1985f46c07b18bb8a93d871f1269bd708c04e99c6057196f00696089dfa4b6fd0651c7858916fd4fe4a658e232f1aa27bb1bcf7a06e6e6df07121d98a57689f8cb2a6bb6a08c1d9e7d37b2368322371d116db8f5079b51aaee230af1ee", 0x72}, {&(0x7f0000000300)="37ac667c764f391ac5dbb253d4d4c3f9be422e829a6ca8363179b045bbaf9e4cf0a5acd0a3e26780d86e2ed13104b63c26e71465956c32014d05d866dd2e064446c6f48b399b11dfe9841a7b6597dd4e4195061401f009757f8d44078f387dcb0709c4542bbe524a2549424f1de1c8dc9c07c3478ace0905fca13e901e3ec4f01cfd350b9a41a3", 0x87}], 0x2) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r5, 0x401c5820, &(0x7f0000000100)) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r6, 0x401c5820, &(0x7f0000000100)) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async)
close(r7) (async)
ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000001340)={{r8}, "64b2c6db55c0427265f6ed1912d51fb1a5727e12152b7b9f3a1d616c7050a2a9b7a95c551442ecd9c306d3d4651d38429cc5e44db2d38677c0ee8d3b2f94aa6f38b5e9c0c3c2184a7b083f710865e3f303bae974300d47122ac4294960b07a89ce6a37de11fb1ab41d53443b5ab8f1b91494764250c8f8caa3e283daf64b6c6f934a442c3a1302ef68691cf520979bd1c0bcaa1193cdd56d7ebd22577303a21df05faeb5e17b5025a9c1c077556f3964efc7488aed980c1c08a6f98a6790684a498943339fb5bd38ee515fecd953f317ca108d9a5425dfec06a89eaf1742083230b9bc1d413521fb19527023773b8e9ee23e7d3d747da3139b61c3466456422e9eaa403a3c650bbc34582f451f4bb792d7caa2a1fca37f60b931c1c5efaee8b77bc524858174642bfb40d1ff4bafc5f97f8315e10640fe00d5d14a05a80b6485588ad99b65bc7fff3be6a77fc0d823a8a9ac59d2e7f37d6e8e411d38e68ecfefaeb4009bd69b9e2688c7d0cb69a01bf0a54f61df782426a46cd64322c2a54bcaaad85b7d8397ed1b9ed695e91b3bb587a6cde881bcab344c895a4cf1d315196a6ce28131826b6c9b54a832616db15cd81a2ba59e4323a227e73a54ce7d07a6b532189c817871c2d8fd659e23dca2505a25837e2529295eb46c75e23c7366ea7b37bd128e38bbe895e00f74b8e0ee8a2a0cb1c8ad387e176cd68b53aa2352137ef24a356f3c88dd0fb0191be4d0c304e4d6d1f72504198dfd40c8273f0051dec4373e890675975a48405d6a0f5aedf2e5eda3c73350eeaa837328945d28d92a99ca081cb1abd3f23ea335c3d66d3f922892bb97029033cabec9db29ef6a557e885a6f87af932966e3657c5b2f0e054075612cc716c6523ad943e934411c0b4ad29902a5762264fdeaaa3faba840fae8e88f8f250d500a0eae092b12c47ec6abee3c8f8dab43d4f6b054c8cb5456b6091c255656b13eca7e975f7df29212e83a2a425209b69a5ed7c07a2b76ae866fc1ba49a85bed49703b65ba803f956e4812e3a56ab0b9392b18c61e886b03d40e38ab38e1cfa65c0d2866520367e8bc830b7b89bb67a92889a3c12d9603a81a5cb602453ad5230749a5e5b6a9a48374380e4d6e190596dbc1527c4e9fb50093f368a8d4c5d8dd2b548461f1df0d81526220239eaac0086871e9c3d5e34c0c98b6770dd74745902f4fe68e9f677c282cb06e31d2d2f5d4689bf0fe16f821493b22e85652fd118352128a201426424bdef6bdbb3a85b2498a2b7d351a14e97ff0e105ca56afe4abb62164d3bbf54554b4a5804172692a8bcad0094a94b1abd29ca16e559a9662749fc14384f27201b1e326a6b8d025f12d4dddf0065e30495b332dd8e079a43282dbc0024397be4e3954d23a6c92a426df84368bd93c4f6a5ad023d0b8b08deb6c646e78a2206b7a3f19ed79a58db9125211c8a87d0e8565d599185b26a62e59aacccab18afc816580b0c011e91be2bc4d94c921a24b55cd8125c49234d1ec3f2ec03976bef131db29677d6fa066e754109913e964716597ed70dd8c2cd46657f98780debf4f288e6f5eac356a580cb782190c5f97a8ba4b4cec31954403caf8faedf59930c73d38219a1ae62094dc03861bad5acb7e7e369c38d0dbab5f02b8023734aef05eaf7112581b7bcfd27261907fa95f08097fcbb39347cd12fc0a6cbbbe948ed226bea116281b2ac9c42145f59e05a4a8014da20fb6239b07e4983cb88088b634f0927165667d0072e21e1b54e6d9aaad8242678e333cbac9fbb8b276e993e595054f14e8217c120d483e392f415a1ecd6becc0d0f622099ffce46b511c8f5f08fa011777bdd4439e78b0e5f309a48b2cb67230ecf0727b5b9277cf05becf2fdc238aea3bca37a8389f81a6785ad9ff95475d34af389f28a881358db11dc1793c68d84d53717b5816e83b107f832a420b5652d1a8cc15af7ba52e2fbfcbbef215414d3dc084fb7e045d0860d3bc3f72e8d07c3ecb1503c2bbe66db92fda9f0f4baa8b0088ff58f37955200b217420f883d4abbb0ac8d0285217180390df6637ff6f85a8f7630179a0e5f2ded457af93a5cb4708dc3810717dc6d5a598082925b8cf4498800573dfd68d96e1c6e4febed148d91261476c475622c6cad2754bac66a2c7961b33b47d2c3226437c46f2de7947b121b08a8fd1aca4abb3d8f084df103f6c9da3f79cdbd9c5ed12b82f0d96be38445c4aa596b4bc43aa33c1b40ce822ea04ab84be2ade0e00b856543c4aa96c2b8de5bb5f9af058c68aed0be6d27b2000c29c4e9db145b66194879e79c63e88c1cdade66ccca2ff4541e6dd4a34b53e8dbbd38169deffcb5e617cc388ed603d6b0fce6385172f4ff09d37200c33fe631aaca6a54985a329a23b7e5242c40480b1417970658c85c8e0ad1a92a253e048ac621b1ab7fe3b815fce9a1c9d3efee0b9bbd29429f9467c6addedcbcaf1df5ae30369a2f61f310559ca5cc04663f4a33705e1d151e11e3ed8459918fb92ee1c80baeb6b7cc23b19c983574a7cd554b6e66e7b296300c77a369ee20211d5c50438e8c749cbb55896ceeaa051de952de15ee27c54c792a3bf7201a69240e6418651a9a9c3c8a50997db5eff199a5fb96b645293dfc078f4dac6b22e3fe721e0afbb4076063771a83897ffba2e66059fe60cc0939271a650419acde6a42ed9ce3989d9456abaaf6a1ab02b35ef82d5606bb1bda7c4f3e43a91422d673a93b8c984c8554a989a2d50ced1961591fa0cc946c04f5cde45722d255f2fec9c14bc006c58ff95eaecbea26d03f12c9dbde45e369a7d0be8306779e1b08f8d65da9054402df77b578fa7fda485cab1aa0a3cd9b0d721cf7ea6b9da177213f9365f55af9e2f378de029455b745fe3670e39f416c3c83cc5b43ca5155331cc1336b1b3d4c33c8e66de2bdca1ac6d14733ab1a47a904c40c4ff5a3c321f6c7382a97a044efc26f66282c8a768305553c88a90feb78a60630af02f0ffc2b5ea630746547c55c33fb6dc6943ea427010a2f7532c59b2760ddf00196091e4ce34ad8abb34515df53aa648a2e4c80162fad8615b1c497077de623ea016f6badc5e3eceafb6af84b705d4165efd2f23a499882a3853c25f512ae11aa338b861659bfa1fc63752dc9085c9df9908a288eb9e7ce66625345c23a05e501b78ebde8afeace77d27222ebf16eff74c72f32d7432c5316523bcebf4ffb5a006ebff7ee41bcebbddd089ff45c7dc7190349e27c53f1653bfb63d560dfa8a8f26daf0d3b2179750961193cc325e3577cb277267422cce9b074af948e7e0e228fd872580b8a5be03d2b91ff5e94b5e3ba1e8c428ce9c833c90c6fa7850107c8b463e7e64176ef6cc41d7f1b38444bce87b26b29c6aeb5f0ac49b9fdaccaae25d1c75bb9dbc6e30d404af8cad30f2727bbb6efa0ec36849cb740e02774c1d0fe2c1cd20bf217d53fc7fbf34be8b027aaec900a07470cc4fd8749b5d65d9d033c02dee3acb9ed77d869c565ebe03588b5491bdbc31d1614ee0701035c398a9bef0e9fe1cbc35c9f8bfc40318dcf9b7f70a0b022a96e13e5da504d33ded3a99932f35801c17505aa67e6cf1cbf96159a94f52dbe8dc985574de5caa74e6043b85c0c8b306f42ac3f8d7af8fbd02d5f759394b00f1c112c4e1633edc04fd74131cc88e32c59d703b032c341c8f0c185f965b137d616ddd53b05ea790541d67f64348974f9a3b59fe2ff931ebc0dd7bd8ee8f1f9be5b4524defea6b83442e47409000b2cc8bf5b92c2eba1601e7d3a3a318d50ad680727f0391dbee5c5891713d42781f8e90e0c5fb92d17bb8edc4d6a2452c6d485026146df60d0c6b27dab4cbb17dafb8d3565ed3d3862cf0f1109580bcad041830badc41cec0b2f608d4cbe258a4b523927a768efc0a14d17e3afe4ef251d5a1ff7fa71e2b43dc1d7380ab5bf6a71101cd06e5100cfd6bb457f4f30eaff21c64b3b0a0e874eec23f411d2452644c780b4d5e7882753b15bf77157bde1b1ec96b4bf28297aa6efce3dbd0a3345764a226ef8cbfbfbc5e9a610ac414540a593b716049c0357c684ff0f883fbde0fad4702ec45799c1f9e3f319f99e54467d38d35776f7a6051efaf6f31ded7f658155a107fa7cbe9ae75fbff5f768c7cc86b382533ce1277b736051f4acfb485dc066c305749282d0764850e5231dccf78f460d3a75f7d493823a866314de5532d9b6adbac67951b2a37e50e2ebc2f71b43ca462553e41bdeea821ccdbbdcb77ddc922bfb5ed191d15d3703fa339d73e5e1413bf2265e2b05a60181758ba57fe21c42ef66110ed0b1a9af310dc0e93260abfb7c1763dc324e87188b91a31c536decdd0572042882e6f113520fd5465bfb6f60a344d1ebfc762e55b5b731fcf2adef50cd62781bc8b577e6205b0d598aa4e6276ccbdc0bb0d64b131c85e355da7834fe94788b09476a3d95a1bfa59dda51d62893fef74aaee7a7c48a427a3d56b052086942992237337f16f6c6217d6213fa3265bd1827cbd5cdd51f0fcd389993546adfdc2a4091593fb42941b631f5ae0ff73cd9e349cd87bbf04e91bca2820180033fb1f014dad426a0f7933ad16d3d24d3740900ea574f585cb293c660cbf72670920580e5a6077f4aa09907f50d45ce8afb33224e0bae9043fc8c1147719b66da2a49ff8517591c618f5ec2f6cad2a9f0c7f2c758ed31816f62aeb80da54a3aa688b17d51196bb157279d9afb281d3e2e601020c8456ef22073df5b936ce547c29acaeb3adabc177c6d986715eb18ca4a70c45ce9fe7cf339be5966c318f416f6433c3a2e0c80ac06589cd4143fd999fa49d08399919657618ab291ebc31e1956dc68e67f71029802bbfb9a381e089de9bd296bc29ddd234d54b4d155c3d85d1ca15d89142290bf73e5cb5012793f270c80e3792e9758de3ec3b1817312f0837f2601307d0bc76baf0a473010e9ff3a545ab5a8961af8ce1d941481ba37ee92c5da6f86bf853fae1851aafb8d2c52aaa9c3cfe7a8611967d13f4d954f52cdab91906fc6a41e82f7e0281faade3e00e174159f41d4199a94a3c4a43c1729a38857ab8e6c180a91b0d2514d70af28e81580cbdb95982f04eece24e37a527905b06a29bfe2b29aa2a6f61ba77ccf784e2682b4c028173f81bd99f1f93ee7f8085abab082d22d9aa72c24467f439823c3ef920ea7196c7d94993797fbb827822cb79f6d4ef9058082a9a9705ff9ece6327fbc9bae53e2f6a0574eb9edf78ce50d596a4b3544337715c344a9610d5bfaa900cae87e693aea6da3dcf8c9212b8bae3dbb850cedc099d5ee7ffe694f5bc4e818167e1e4bdf64b28bf5f2848486c13c08a396f3d8dfca9a0ec5e3b692e3cd3121f783f39651955314ce271fe3952180bd8a85ee107902a1cd9112f57f8bfe61c5e76b73b9932cda724571e4c22ddfbf04202605b41ba83f3a8c36ff76a9554e76fd60ac79c46863ed626517ad3ca74f58a8854cc13b9faf4e8f672bd88797488fab9e4b0ded602ae5a2822cefee6adf2850cbb34640715ce24df8b4ef08b9a2f921ac78dac05f1c178fd2ff8ce8e25d6977448bf932d72eebc0d532f7e144c05a17af8e173e7472a31d89cbf265d12df41a8687e82e9e0e1cc5e62003e3a4af58ca2fa81e43af6a4f819d0f24255010a0430622ac75ba9774fc78cdde600424a9878c08a57e56f03678328f54127add3ff47e659dbce1fdb447f08cbca28f5e26c5cc01b676bdede76379b50b55bc2b4ec3550d08b8e254c7fa9a77315d"}) (async)

[  636.653066][   T27] audit: type=1804 audit(1668891733.426:638): pid=23303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/918/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0
21:02:13 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r5, 0x0, 0x10000a006)

21:02:13 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000748000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  636.704947][T23314] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:13 executing program 4:
unshare(0x6c060000)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="5d12dfba3aa1e4d9d4186c8a6d7cabc9887d4f6a03fcf05b2984", 0x1a, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x39, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

21:02:13 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x291], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:13 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x5}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:13 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x294], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:13 executing program 5:
r0 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8)
r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async)
r3 = accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendfile(r3, r4, &(0x7f0000000280)=0x10001, 0x4) (async)
write$cgroup_type(r2, &(0x7f0000000180), 0x9) (async)
writev(r1, &(0x7f0000001300)=[{&(0x7f0000000080)="6fb6d8837d63fa805233d57016450a62def06f405d1985f46c07b18bb8a93d871f1269bd708c04e99c6057196f00696089dfa4b6fd0651c7858916fd4fe4a658e232f1aa27bb1bcf7a06e6e6df07121d98a57689f8cb2a6bb6a08c1d9e7d37b2368322371d116db8f5079b51aaee230af1ee", 0x72}, {&(0x7f0000000300)="37ac667c764f391ac5dbb253d4d4c3f9be422e829a6ca8363179b045bbaf9e4cf0a5acd0a3e26780d86e2ed13104b63c26e71465956c32014d05d866dd2e064446c6f48b399b11dfe9841a7b6597dd4e4195061401f009757f8d44078f387dcb0709c4542bbe524a2549424f1de1c8dc9c07c3478ace0905fca13e901e3ec4f01cfd350b9a41a3", 0x87}], 0x2) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x401c5820, &(0x7f0000000100))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x401c5820, &(0x7f0000000100)) (async, rerun: 32)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (rerun: 32)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async)
close(r7)
ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000001340)={{r8}, "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"})

[  636.865212][T23327] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:13 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500074c000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:13 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x6}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:13 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x2b8], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  636.974725][T23337] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:13 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000240)=0x1, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.events\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x70, r8, 0x100, 0xfffffd13, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@mpls_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_TTL_PROPAGATE={0x0, 0x1a, 0x3}]}, 0xfffffffffffffe9f}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00067c3f0d610000000000002700120009000100766574688edcfd7b2b5542da1f1b64f02c6f580a0ec22d0b2def4b533df00c875fda06ffa7f134cc19ab42f9a5b01991e5520fee69dd43afb5d1f7de3553da232836c6fc0fa34f8471e6f52a84d69240b1e01a68bec4069b6ab3f8afa9dbaf9f28af5ba70ebe2407fcebfe6a094c02d6b9ebdc8e9601e0a748e840a3afeb1f8f290a53ce0cf831f4608dbcc416d5"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)

21:02:13 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000760000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  637.123470][   T27] audit: type=1804 audit(1668891733.896:639): pid=23331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/919/cgroup.controllers" dev="sda1" ino=1158 res=1 errno=0
[  637.198061][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  637.291312][T23350] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
21:02:14 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async, rerun: 64)
sendfile(r10, r5, 0x0, 0x10000a006) (rerun: 64)

21:02:14 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x2c0], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  637.589522][   T27] audit: type=1804 audit(1668891734.366:640): pid=23355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/920/cgroup.controllers" dev="sda1" ino=1164 res=1 errno=0
21:02:14 executing program 4:
unshare(0x6c060000) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="5d12dfba3aa1e4d9d4186c8a6d7cabc9887d4f6a03fcf05b2984", 0x1a, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x39, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

21:02:14 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:14 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000768000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:14 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x300], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:14 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x1, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000240)=0x1, 0x4) (async)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.events\x00', 0x0, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x70, r8, 0x100, 0xfffffd13, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) (async)
r10 = socket$netlink(0x10, 0x3, 0x0) (async)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@mpls_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_TTL_PROPAGATE={0x0, 0x1a, 0x3}]}, 0xfffffffffffffe9f}}, 0x0) (async)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00067c3f0d610000000000002700120009000100766574688edcfd7b2b5542da1f1b64f02c6f580a0ec22d0b2def4b533df00c875fda06ffa7f134cc19ab42f9a5b01991e5520fee69dd43afb5d1f7de3553da232836c6fc0fa34f8471e6f52a84d69240b1e01a68bec4069b6ab3f8afa9dbaf9f28af5ba70ebe2407fcebfe6a094c02d6b9ebdc8e9601e0a748e840a3afeb1f8f290a53ce0cf831f4608dbcc416d5"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)

21:02:14 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async, rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r10, r5, 0x0, 0x10000a006)

21:02:14 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x308], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:14 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500076c000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  637.858040][T23366] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  637.868360][T23367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
21:02:14 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x48}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:14 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e, 0x6, 0x7f, 0xeb, 0x42, 0x8001}, 0xfffffc2d)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x8ae}, @TCA_TBF_BURST={0x8, 0x6, 0x12}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xff265166baa07528}]}}]}, 0x74}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000004c0))
sendfile(r11, r6, 0x0, 0x10000a006)

21:02:14 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x343], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:14 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000774000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  638.020843][T23386] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  638.212768][T23392] sch_tbf: burst 18 is lower than device team0 mtu (1514) !
21:02:15 executing program 4:
unshare(0x6c060000) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="5d12dfba3aa1e4d9d4186c8a6d7cabc9887d4f6a03fcf05b2984", 0x1a, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff}, 0x1c) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x39, 0x60000000, &(0x7f0000000100)="b9ff03076044238cb89e14f089061be0ffff00004000630277fb0800141ae000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)

21:02:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x1, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) (async)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000240)=0x1, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.events\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x70, r8, 0x100, 0xfffffd13, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) (async)
r10 = socket$netlink(0x10, 0x3, 0x0) (async)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@mpls_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_TTL_PROPAGATE={0x0, 0x1a, 0x3}]}, 0xfffffffffffffe9f}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00067c3f0d610000000000002700120009000100766574688edcfd7b2b5542da1f1b64f02c6f580a0ec22d0b2def4b533df00c875fda06ffa7f134cc19ab42f9a5b01991e5520fee69dd43afb5d1f7de3553da232836c6fc0fa34f8471e6f52a84d69240b1e01a68bec4069b6ab3f8afa9dbaf9f28af5ba70ebe2407fcebfe6a094c02d6b9ebdc8e9601e0a748e840a3afeb1f8f290a53ce0cf831f4608dbcc416d5"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)

21:02:15 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x4c}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:15 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500077a000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x386], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:15 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e, 0x6, 0x7f, 0xeb, 0x42, 0x8001}, 0xfffffc2d) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x8ae}, @TCA_TBF_BURST={0x8, 0x6, 0x12}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xff265166baa07528}]}}]}, 0x74}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff}) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0}) (async)
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r11, r6, 0x0, 0x10000a006)

21:02:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x3a1], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:15 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007f0000000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  638.751558][T23403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  638.751617][T23404] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:15 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x3b0], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:15 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3f)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xffffffffffffff40}}}]}, 0x68}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000240)=0x1, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='memory.swap.events\x00', 0x0, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x70, r8, 0x100, 0xfffffd13, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@mpls_newroute={0x1c, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_TTL_PROPAGATE={0x0, 0x1a, 0x3}]}, 0xfffffffffffffe9f}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="00067c3f0d610000000000002700120009000100766574688edcfd7b2b5542da1f1b64f02c6f580a0ec22d0b2def4b533df00c875fda06ffa7f134cc19ab42f9a5b01991e5520fee69dd43afb5d1f7de3553da232836c6fc0fa34f8471e6f52a84d69240b1e01a68bec4069b6ab3f8afa9dbaf9f28af5ba70ebe2407fcebfe6a094c02d6b9ebdc8e9601e0a748e840a3afeb1f8f290a53ce0cf831f4608dbcc416d5"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x25, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x44, 0x10, 0x413, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0)

[  638.851100][T23400] sch_tbf: burst 18 is lower than device team0 mtu (1514) !
21:02:15 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x60}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:15 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700030000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  639.030969][T23422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[  639.055837][T23425] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  639.097339][T23422] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'.
21:02:16 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES16, @ANYBLOB="110986598d969476838cab5fcc1392386f940fcd18db4f5e68836fb10edae7a078fc4f20e0d909197778d62d0cd933f8b5267d1b08fa800ba337c9740f69af507ca32bba5307b5623a56264d75e26f57b52a220723", @ANYBLOB="a878cd78a04191eb8674b23b9c1b163292a672c4d8ac568ba671da5ab2cc44a515d14eab1bdaa41f9262b1a07d1dfe959418f61b4acfbf09ee4475eee905", @ANYBLOB="7c8ba3f63b743d9efe06e1a119a0020e64e05bb43c87c8604c71c6fd7648ccd35c0d99523f78a938e300d6e834bdee335976eb22681d2435b7178ce2fa6a497f4a1798cb6d91d18c85312c82c5779f37e077b2a620744e72b46ac20c580b721840628f4a55be49360adbde80d7c0e9bf37e30459f643dad3fdf5147d2ec9869b066b29e3e9c991c0799e2b6f8917f447048fc64476898b6464db2da10e1f4e2f21c81786d2c767bb85f3cf007504f0bb7c45b590de75451dd06210ce136b4b3f96630f39b1b0290da0392bf3e104d9f850df91ee8847953f5f1aa2498f69675068aa02ea3e47e5a4d70df13598fc2c7b996a1275dd4a"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r4}, 0x10)
sendfile(r0, r7, &(0x7f0000000140)=0x7, 0x1)
sendfile(r6, r5, 0x0, 0x10000a006)

21:02:16 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e, 0x6, 0x7f, 0xeb, 0x42, 0x8001}, 0xfffffc2d) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x74, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x48, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x8ae}, @TCA_TBF_BURST={0x8, 0x6, 0x12}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xff265166baa07528}]}}]}, 0x74}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0}) (async)
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (rerun: 32)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r11, r6, 0x0, 0x10000a006)

21:02:16 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x3d0], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:16 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000773040000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x68}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:16 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/26, 0x8})
sendto$inet6(r0, &(0x7f00000001c0)="ba9eb281bbca63ef2880fde0772bf8914b7a3271088c99da114cda380d8b92d95a384d7060b80a18d66253833abfa3b1ed7d87670ddd37dbf1b2208bb552c90bc8de5c7d1664937e7378596f8f3e7f4124654c25f3d5a7a598c072b6cfb0008d37fc83bc1f160c19411f27310cfc37193224", 0x72, 0x800, 0x0, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x3, @bcast, 0x5}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)

21:02:16 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/26, 0x8})
sendto$inet6(r0, &(0x7f00000001c0)="ba9eb281bbca63ef2880fde0772bf8914b7a3271088c99da114cda380d8b92d95a384d7060b80a18d66253833abfa3b1ed7d87670ddd37dbf1b2208bb552c90bc8de5c7d1664937e7378596f8f3e7f4124654c25f3d5a7a598c072b6cfb0008d37fc83bc1f160c19411f27310cfc37193224", 0x72, 0x800, 0x0, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x3, @bcast, 0x5}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/26, 0x8}) (async)
sendto$inet6(r0, &(0x7f00000001c0)="ba9eb281bbca63ef2880fde0772bf8914b7a3271088c99da114cda380d8b92d95a384d7060b80a18d66253833abfa3b1ed7d87670ddd37dbf1b2208bb552c90bc8de5c7d1664937e7378596f8f3e7f4124654c25f3d5a7a598c072b6cfb0008d37fc83bc1f160c19411f27310cfc37193224", 0x72, 0x800, 0x0, 0x0) (async)
connect$netrom(r0, &(0x7f0000000080)={{0x3, @bcast, 0x5}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) (async)

21:02:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x6c}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:16 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x3e8], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  639.458376][T23436] sch_tbf: burst 18 is lower than device team0 mtu (1514) !
21:02:16 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700050000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:16 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)={0x3c, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x28045)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r11, r6, 0x0, 0x10000a006)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000005c0))

21:02:16 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x3f9], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:16 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES16, @ANYBLOB="110986598d969476838cab5fcc1392386f940fcd18db4f5e68836fb10edae7a078fc4f20e0d909197778d62d0cd933f8b5267d1b08fa800ba337c9740f69af507ca32bba5307b5623a56264d75e26f57b52a220723", @ANYBLOB="a878cd78a04191eb8674b23b9c1b163292a672c4d8ac568ba671da5ab2cc44a515d14eab1bdaa41f9262b1a07d1dfe959418f61b4acfbf09ee4475eee905", @ANYBLOB="7c8ba3f63b743d9efe06e1a119a0020e64e05bb43c87c8604c71c6fd7648ccd35c0d99523f78a938e300d6e834bdee335976eb22681d2435b7178ce2fa6a497f4a1798cb6d91d18c85312c82c5779f37e077b2a620744e72b46ac20c580b721840628f4a55be49360adbde80d7c0e9bf37e30459f643dad3fdf5147d2ec9869b066b29e3e9c991c0799e2b6f8917f447048fc64476898b6464db2da10e1f4e2f21c81786d2c767bb85f3cf007504f0bb7c45b590de75451dd06210ce136b4b3f96630f39b1b0290da0392bf3e104d9f850df91ee8847953f5f1aa2498f69675068aa02ea3e47e5a4d70df13598fc2c7b996a1275dd4a"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r4}, 0x10)
sendfile(r0, r7, &(0x7f0000000140)=0x7, 0x1)
sendfile(r6, r5, 0x0, 0x10000a006)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0) (async)
write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES16, @ANYBLOB="110986598d969476838cab5fcc1392386f940fcd18db4f5e68836fb10edae7a078fc4f20e0d909197778d62d0cd933f8b5267d1b08fa800ba337c9740f69af507ca32bba5307b5623a56264d75e26f57b52a220723", @ANYBLOB="a878cd78a04191eb8674b23b9c1b163292a672c4d8ac568ba671da5ab2cc44a515d14eab1bdaa41f9262b1a07d1dfe959418f61b4acfbf09ee4475eee905", @ANYBLOB="7c8ba3f63b743d9efe06e1a119a0020e64e05bb43c87c8604c71c6fd7648ccd35c0d99523f78a938e300d6e834bdee335976eb22681d2435b7178ce2fa6a497f4a1798cb6d91d18c85312c82c5779f37e077b2a620744e72b46ac20c580b721840628f4a55be49360adbde80d7c0e9bf37e30459f643dad3fdf5147d2ec9869b066b29e3e9c991c0799e2b6f8917f447048fc64476898b6464db2da10e1f4e2f21c81786d2c767bb85f3cf007504f0bb7c45b590de75451dd06210ce136b4b3f96630f39b1b0290da0392bf3e104d9f850df91ee8847953f5f1aa2498f69675068aa02ea3e47e5a4d70df13598fc2c7b996a1275dd4a"], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r4}, 0x10) (async)
sendfile(r0, r7, &(0x7f0000000140)=0x7, 0x1) (async)
sendfile(r6, r5, 0x0, 0x10000a006) (async)

21:02:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x74}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:16 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000005c0)={'ip6_vti0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) (async)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000000)=""/26, 0x8}) (async)
sendto$inet6(r0, &(0x7f00000001c0)="ba9eb281bbca63ef2880fde0772bf8914b7a3271088c99da114cda380d8b92d95a384d7060b80a18d66253833abfa3b1ed7d87670ddd37dbf1b2208bb552c90bc8de5c7d1664937e7378596f8f3e7f4124654c25f3d5a7a598c072b6cfb0008d37fc83bc1f160c19411f27310cfc37193224", 0x72, 0x800, 0x0, 0x0) (async, rerun: 64)
connect$netrom(r0, &(0x7f0000000080)={{0x3, @bcast, 0x5}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) (rerun: 64)

21:02:16 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700060000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:16 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x3fe], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7a}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:16 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700070000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:16 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) (rerun: 64)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)={0x3c, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x28045) (async, rerun: 64)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async, rerun: 64)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async, rerun: 32)
sendfile(r11, r6, 0x0, 0x10000a006) (rerun: 32)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000005c0))

21:02:16 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x803], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:16 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)={0x3c, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x28045)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r11, r6, 0x0, 0x10000a006)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000005c0))

21:02:16 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xa8}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:16 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x3f00], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:17 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0}) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f00000012c0)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES16, @ANYBLOB="110986598d969476838cab5fcc1392386f940fcd18db4f5e68836fb10edae7a078fc4f20e0d909197778d62d0cd933f8b5267d1b08fa800ba337c9740f69af507ca32bba5307b5623a56264d75e26f57b52a220723", @ANYBLOB="a878cd78a04191eb8674b23b9c1b163292a672c4d8ac568ba671da5ab2cc44a515d14eab1bdaa41f9262b1a07d1dfe959418f61b4acfbf09ee4475eee905", @ANYBLOB="7c8ba3f63b743d9efe06e1a119a0020e64e05bb43c87c8604c71c6fd7648ccd35c0d99523f78a938e300d6e834bdee335976eb22681d2435b7178ce2fa6a497f4a1798cb6d91d18c85312c82c5779f37e077b2a620744e72b46ac20c580b721840628f4a55be49360adbde80d7c0e9bf37e30459f643dad3fdf5147d2ec9869b066b29e3e9c991c0799e2b6f8917f447048fc64476898b6464db2da10e1f4e2f21c81786d2c767bb85f3cf007504f0bb7c45b590de75451dd06210ce136b4b3f96630f39b1b0290da0392bf3e104d9f850df91ee8847953f5f1aa2498f69675068aa02ea3e47e5a4d70df13598fc2c7b996a1275dd4a"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01edff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0)={0x0, r4}, 0x10)
sendfile(r0, r7, &(0x7f0000000140)=0x7, 0x1) (async)
sendfile(r6, r5, 0x0, 0x10000a006)

21:02:17 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700090000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:17 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xcd}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:17 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) (rerun: 64)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)={0x3c, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x28045)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async, rerun: 64)
sendfile(r11, r6, 0x0, 0x10000a006) (rerun: 64)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000005c0))

21:02:17 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x4000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:17 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x17b}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:17 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x4303], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:17 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000a0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:17 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x7900], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:17 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
write$binfmt_elf64(r6, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xf7, 0x23, 0x3f, 0x1, 0x3, 0x6, 0x8, 0x17c, 0x40, 0xd3, 0x7ff, 0x2000, 0x38, 0x2, 0x6, 0xffff, 0x81}, [{0x2, 0xadbf, 0x6, 0x1, 0x573d8cdc, 0x6, 0x8, 0x8}], "d9cedec7a2bc8ff0e3e294d07a64091485da7af32480a5feb620e0690c82da37bb5597b292e861cee1ef5c2241471a5a7538406e96976de1dc0f6a6a65177c56713dcb53c4aa24be24a34523031ee12670262329f7a1f12d8bb9d7f8eaef0d123e22a3bc72322092c77d1c83b1a6ff93c8b3321c5d4b1695fb1e20fe582784f847e910b8b9ac7a7ea20d6f9a3e20837a", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x608)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x29}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x38}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r4, 0x0, 0x10000a006)

21:02:17 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x212}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x5}]}}]}, 0x38}}, 0x0)

21:02:17 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000e0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:17 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x8603], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:17 executing program 5:
unshare(0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x56)
shutdown(r0, 0x2)
pipe(&(0x7f0000000040))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0)
sendto$inet6(r1, &(0x7f0000000280)="64cc93b53f39a69555c65e29c27ceb6e7e929c1c4b01e7acb81b53a2c5085f4eb9e6e002a5312d803b76522210f189ac5d6c839e88737d1722495d52cbb905663a3d92d47a937ce3b98e8c027d1457ba3c3de4c47f06b79c0500a243553f97b3f51e6aa16883c3e9e1b822ac66af73dc1bc02c3b2c8b125a741b538e05f26627b2a895b9bddb90037d5e775e5fae634eb80e23a95fbae7761f3b5d267bb9f76d30df7dec50abfddbe99a1ae59f6389e1644b4a06af6c331b13b22517455cc404f690acf21e771a1a2b0caa46ce8e9471f26e2b14c9b60612ee02da", 0xdb, 0x4004005, &(0x7f0000000080)={0xa, 0x4e23, 0x108000, @empty, 0xfffffffe}, 0x1c)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140))

21:02:17 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x24c}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  640.827899][T23525] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
21:02:17 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000f0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:17 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x9102], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  640.958981][T23535] recent_mt_check: 8 callbacks suppressed
[  640.959003][T23535] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:17 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x5}]}}]}, 0x38}}, 0x0)

21:02:17 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x9402], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:17 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x27c}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  641.154590][T23543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  641.180294][T23548] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:18 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
write$binfmt_elf64(r6, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xf7, 0x23, 0x3f, 0x1, 0x3, 0x6, 0x8, 0x17c, 0x40, 0xd3, 0x7ff, 0x2000, 0x38, 0x2, 0x6, 0xffff, 0x81}, [{0x2, 0xadbf, 0x6, 0x1, 0x573d8cdc, 0x6, 0x8, 0x8}], "d9cedec7a2bc8ff0e3e294d07a64091485da7af32480a5feb620e0690c82da37bb5597b292e861cee1ef5c2241471a5a7538406e96976de1dc0f6a6a65177c56713dcb53c4aa24be24a34523031ee12670262329f7a1f12d8bb9d7f8eaef0d123e22a3bc72322092c77d1c83b1a6ff93c8b3321c5d4b1695fb1e20fe582784f847e910b8b9ac7a7ea20d6f9a3e20837a", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x608) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x29}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x38}}, 0x40880) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r4, 0x0, 0x10000a006)

21:02:18 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007003f0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xa103], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:18 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x2a5}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xa901], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  641.318711][T23554] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:18 executing program 5:
unshare(0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async)
sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x56) (async)
shutdown(r0, 0x2) (async)
pipe(&(0x7f0000000040)) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) (async, rerun: 64)
sendto$inet6(r1, &(0x7f0000000280)="64cc93b53f39a69555c65e29c27ceb6e7e929c1c4b01e7acb81b53a2c5085f4eb9e6e002a5312d803b76522210f189ac5d6c839e88737d1722495d52cbb905663a3d92d47a937ce3b98e8c027d1457ba3c3de4c47f06b79c0500a243553f97b3f51e6aa16883c3e9e1b822ac66af73dc1bc02c3b2c8b125a741b538e05f26627b2a895b9bddb90037d5e775e5fae634eb80e23a95fbae7761f3b5d267bb9f76d30df7dec50abfddbe99a1ae59f6389e1644b4a06af6c331b13b22517455cc404f690acf21e771a1a2b0caa46ce8e9471f26e2b14c9b60612ee02da", 0xdb, 0x4004005, &(0x7f0000000080)={0xa, 0x4e23, 0x108000, @empty, 0xfffffffe}, 0x1c) (rerun: 64)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140))

21:02:18 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700480000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:18 executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_FLUSH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000024000b0f00000000e4ff000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000b00010064736d61726b00000c0002000600010020"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x5}]}}]}, 0x38}}, 0x0)

21:02:18 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x2bc}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:18 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
write$binfmt_elf64(r6, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xf7, 0x23, 0x3f, 0x1, 0x3, 0x6, 0x8, 0x17c, 0x40, 0xd3, 0x7ff, 0x2000, 0x38, 0x2, 0x6, 0xffff, 0x81}, [{0x2, 0xadbf, 0x6, 0x1, 0x573d8cdc, 0x6, 0x8, 0x8}], "d9cedec7a2bc8ff0e3e294d07a64091485da7af32480a5feb620e0690c82da37bb5597b292e861cee1ef5c2241471a5a7538406e96976de1dc0f6a6a65177c56713dcb53c4aa24be24a34523031ee12670262329f7a1f12d8bb9d7f8eaef0d123e22a3bc72322092c77d1c83b1a6ff93c8b3321c5d4b1695fb1e20fe582784f847e910b8b9ac7a7ea20d6f9a3e20837a", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x608) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x29}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x38}}, 0x40880) (async, rerun: 64)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r10, r4, 0x0, 0x10000a006)

21:02:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xb003], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xb802], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  641.915893][T23566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
21:02:18 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007004c0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  641.956274][T23572] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:18 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x2c0}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xc002], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:18 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f00000005c0)={{0x2, 0x4}, 0x100, './file0\x00'})
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:18 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x33a, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000696467650000e1eea49c48ca040b7626471b75180002800a0014000180c2000000000008000400"/61], 0x48}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000000)

[  642.154822][T23589] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  642.162466][T23592] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
[  642.278172][   T27] kauditd_printk_skb: 6 callbacks suppressed
[  642.278190][   T27] audit: type=1804 audit(1668891739.056:647): pid=23593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/931/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0
21:02:19 executing program 5:
unshare(0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) (async, rerun: 32)
sendto$inet6(r0, 0x0, 0x0, 0x2600c800, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x56) (rerun: 32)
shutdown(r0, 0x2)
pipe(&(0x7f0000000040)) (async, rerun: 32)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) (rerun: 32)
sendto$inet6(r1, &(0x7f0000000280)="64cc93b53f39a69555c65e29c27ceb6e7e929c1c4b01e7acb81b53a2c5085f4eb9e6e002a5312d803b76522210f189ac5d6c839e88737d1722495d52cbb905663a3d92d47a937ce3b98e8c027d1457ba3c3de4c47f06b79c0500a243553f97b3f51e6aa16883c3e9e1b822ac66af73dc1bc02c3b2c8b125a741b538e05f26627b2a895b9bddb90037d5e775e5fae634eb80e23a95fbae7761f3b5d267bb9f76d30df7dec50abfddbe99a1ae59f6389e1644b4a06af6c331b13b22517455cc404f690acf21e771a1a2b0caa46ce8e9471f26e2b14c9b60612ee02da", 0xdb, 0x4004005, &(0x7f0000000080)={0xa, 0x4e23, 0x108000, @empty, 0xfffffffe}, 0x1c) (async)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140))

21:02:19 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700600000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:19 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xc801], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:19 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x300}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:19 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x33a, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000696467650000e1eea49c48ca040b7626471b75180002800a0014000180c2000000000008000400"/61], 0x48}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1}, 0x14}}, 0x0) (async)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000000)

21:02:19 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async, rerun: 64)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f00000005c0)={{0x2, 0x4}, 0x100, './file0\x00'}) (async, rerun: 32)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async, rerun: 32)
sendfile(r9, r4, 0x0, 0x10000a006)

[  642.708494][T23607] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  642.713913][T23606] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
21:02:19 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xd003], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:19 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700680000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:19 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x3ad}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:19 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007006c0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:19 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$AUTOFS_IOC_EXPIRE(r6, 0x810c9365, &(0x7f00000005c0)={{0x2, 0x4}, 0x100, './file0\x00'})
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:19 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x33a, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000696467650000e1eea49c48ca040b7626471b75180002800a0014000180c2000000000008000400"/61], 0x48}}, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000000)

[  642.899694][T23619] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  642.965890][T23623] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'.
21:02:20 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xe803], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:20 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x3b0}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:20 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000704730000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:20 executing program 4:
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001380)=ANY=[@ANYBLOB="edc87f891cdb00f4ea020c90619ce6518a634b4c181cb05bd543030fe173a82b356f3d3b05b536887e6b189eca86c11f05860cdcd0a4182d0308841173d930d2e8b4f12a705e41956c087e2bebfdf54df9fd003b0ac1d26524d0e8b1f5115a748538c2455f2945ecb0423d1ed536774d0bfa575121bee788532c6d3b5cc92e2290c300ecb4cfeadb73c4d36bff1e761505992f1da02bed895959a761b3f75fb33cff2b34f66dcbda6a6a58a46b4b5a82969d9086d264a39a165bcade236235660ce4a8e4454af94c24a8245ec6a2968054e2a62a184c75452b45d1a1878ccf3e294b65dcf2dbd3b6", @ANYRES16], 0x20}}, 0x0)
unshare(0x6c060000)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x62000200)
unshare(0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @remote, 0x9}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x20000000)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4)
write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000240)=""/161, 0xa1, 0x2000, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x22}, 0x514}, 0x1c)
recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001480)={<r7=>r6, 0xfdc, 0xbf7, 0x2})
r8 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040))
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
unshare(0x2000100)
ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000000300)={{r9, 0x0, 0x1000, 0x3, 0xfffffffffffffffd, 0x8, 0x1f, 0x3, 0x6, 0x40000000, 0x100, 0x1, 0x3, 0xcc}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000240)={0x0, r9, "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", "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"})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000001340)=0xb, 0x4)
splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0)

21:02:20 executing program 5:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getqdisc={0x2c, 0x26, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x10, 0x8}, {0x4, 0xb}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r3=>r0, 0x0, 0xab40, 0x100000000})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xfffffbff, 0x2167, 0x5, 0x48, r1, 0x180, '\x00', r2, r3, 0x0, 0x5, 0x0, 0xb}, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0', [{0x20, ')\xd6@+\\'}, {}, {0x20, ','}], 0xa, "894e303fa65704be8081b4af15bd2561e8540c532fe78446efd9e2ec842175189e8cc2b8d347c84e78046d0894234b2443ccbe0c37ca7f63ec18662012bc3679241fabb8ebeb207a168caa84598aa11dac8db74d502b4f82c1e9865634dbf6b5d71fda407bd195f93331b77bf885ecd14d48161cc4ce6995cfce326cbe496c4d4e78697db6bb6275fdbb538956543d7629f190093885d4a1c448ccfc8f494c3c86"}, 0xb5)

21:02:20 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fddbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="040044000439be768f7d2bc321897318086113bd2ebad0dbcbcc776baef8f45a3ae8d7b69515b0e5db403d5e2a2bdd3949be80c1a1ef8405d0b473c485d926513820af19a149c9ae5df10000f43b5f3e4faa98cce624578ba0271cbc144d0fee234dd830472c7e7b3ad0", @ANYRES16=r3, @ANYBLOB="080025bd7000fcdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
pipe(&(0x7f00000005c0))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0xb4c1737357779d99, 0x6}, 0x10)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000007c0)={0x0, 0x80000000}, &(0x7f0000000800)=0x8)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000e4", @ANYRES8=r0, @ANYRES16=r8, @ANYRES32=r8, @ANYRESHEX=r3], 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r12, r11, 0x0, 0x10000a006)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r12, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="28009100", @ANYRES16=r6, @ANYBLOB="000125bd7000fbdbdf255300000008000300", @ANYRES32=r8, @ANYBLOB="04009900ff0300000000b50c"], 0x28}, 0x1, 0x0, 0x0, 0x20040084}, 0x10)
sendfile(r10, r5, 0x0, 0x10000a006)

21:02:20 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xf400], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:20 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700740000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  643.355320][T23643] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:20 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x3f8}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:20 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xf903], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:20 executing program 5:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getqdisc={0x2c, 0x26, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x10, 0x8}, {0x4, 0xb}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) (async)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r3=>r0, 0x0, 0xab40, 0x100000000})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xfffffbff, 0x2167, 0x5, 0x48, r1, 0x180, '\x00', r2, r3, 0x0, 0x5, 0x0, 0xb}, 0x48) (async, rerun: 32)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0', [{0x20, ')\xd6@+\\'}, {}, {0x20, ','}], 0xa, "894e303fa65704be8081b4af15bd2561e8540c532fe78446efd9e2ec842175189e8cc2b8d347c84e78046d0894234b2443ccbe0c37ca7f63ec18662012bc3679241fabb8ebeb207a168caa84598aa11dac8db74d502b4f82c1e9865634dbf6b5d71fda407bd195f93331b77bf885ecd14d48161cc4ce6995cfce326cbe496c4d4e78697db6bb6275fdbb538956543d7629f190093885d4a1c448ccfc8f494c3c86"}, 0xb5)

[  643.467209][   T27] audit: type=1804 audit(1668891740.246:648): pid=23642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/934/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0
[  643.554149][T23657] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  643.562661][   T27] audit: type=1804 audit(1668891740.296:649): pid=23642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/934/cgroup.controllers" dev="sda1" ino=1177 res=1 errno=0
[  643.580699][T23649] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
21:02:20 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007007a0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:20 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xfe03], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:20 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x3fa}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:20 executing program 5:
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getqdisc={0x2c, 0x26, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x10, 0x8}, {0x4, 0xb}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) (async)
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={<r3=>r0, 0x0, 0xab40, 0x100000000})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xfffffbff, 0x2167, 0x5, 0x48, r1, 0x180, '\x00', r2, r3, 0x0, 0x5, 0x0, 0xb}, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0', [{0x20, ')\xd6@+\\'}, {}, {0x20, ','}], 0xa, "894e303fa65704be8081b4af15bd2561e8540c532fe78446efd9e2ec842175189e8cc2b8d347c84e78046d0894234b2443ccbe0c37ca7f63ec18662012bc3679241fabb8ebeb207a168caa84598aa11dac8db74d502b4f82c1e9865634dbf6b5d71fda407bd195f93331b77bf885ecd14d48161cc4ce6995cfce326cbe496c4d4e78697db6bb6275fdbb538956543d7629f190093885d4a1c448ccfc8f494c3c86"}, 0xb5)

[  643.726273][T23667] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  643.876581][T23649] device bond4 left promiscuous mode
[  643.882182][T23649] device ip6gretap1 left promiscuous mode
21:02:22 executing program 4:
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001380)=ANY=[@ANYBLOB="edc87f891cdb00f4ea020c90619ce6518a634b4c181cb05bd543030fe173a82b356f3d3b05b536887e6b189eca86c11f05860cdcd0a4182d0308841173d930d2e8b4f12a705e41956c087e2bebfdf54df9fd003b0ac1d26524d0e8b1f5115a748538c2455f2945ecb0423d1ed536774d0bfa575121bee788532c6d3b5cc92e2290c300ecb4cfeadb73c4d36bff1e761505992f1da02bed895959a761b3f75fb33cff2b34f66dcbda6a6a58a46b4b5a82969d9086d264a39a165bcade236235660ce4a8e4454af94c24a8245ec6a2968054e2a62a184c75452b45d1a1878ccf3e294b65dcf2dbd3b6", @ANYRES16], 0x20}}, 0x0) (async)
unshare(0x6c060000) (async)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
unshare(0x62000200) (async, rerun: 32)
unshare(0x0) (async, rerun: 32)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @remote, 0x9}, 0x1c) (async, rerun: 32)
sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async, rerun: 32)
r4 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x20000000) (async)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4)
write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000240)=""/161, 0xa1, 0x2000, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x22}, 0x514}, 0x1c) (async, rerun: 64)
recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (rerun: 64)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff}) (rerun: 32)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001480)={<r7=>r6, 0xfdc, 0xbf7, 0x2})
r8 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040)) (async)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0})
unshare(0x2000100) (async)
ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000000300)={{r9, 0x0, 0x1000, 0x3, 0xfffffffffffffffd, 0x8, 0x1f, 0x3, 0x6, 0x40000000, 0x100, 0x1, 0x3, 0xcc}}) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000240)={0x0, r9, "70bb59831a8cd9cff96435c37a0449e5681f76d4476b1c3587ae04cbd7b6dab245f50475ff7204bd4fb42ced26c2721bcf78ff5ae62b9c87b51e753f98363f538a5e2eed3ab7086453467eaa58bf7f6882f35daad51ce8d3783e13b29a9dee140e99eb4fdb122a121e035e5cdf6a987630837a43acfd250c15a144cad0a95153ea2fc3f455f92ce334ed958d209a3f4418cc3f46691cb5b5feb96ac088b7d26540de795705ad0cd56f3cb77821e2bbb66bf80106065894f25bf0100f128cddbf4489c1ee5caef7a7e5203924ba541d2997ff7185e22c32cdd616054c914338ac5093514a048eb92a302139d7272d184eb57d6bffe965e4deb91454a05069fc67", "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"}) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000001340)=0xb, 0x4) (async, rerun: 32)
splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0) (rerun: 32)

21:02:22 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700f00000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:22 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xff00], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:22 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x3fc}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:22 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d", 0x4)
pipe(&(0x7f0000000200))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x10000a006)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x10000a006)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0)
r8 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
r9 = accept$alg(r8, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x7000000}}], 0xe100, 0x0, 0x0)
clock_gettime(0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r11, r10, 0x0, 0x10000a006)
sendmmsg$alg(r10, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="27b3cedd7e9abb73e0e688b6eff689ee7f00b2ae2bf46995ef1cc4b19077a8d4bf826a9dc0bee63eebe58c5eb218f9a7bc8ab8e414ad4f6fdc9f34983fc38ad4aadeaebdbb885c3987c33fa6b453da53d0b2777d54e83dbbabf08124e9c58db183ee764111651b1d70836a1a2eb7c38518b8f9e0", 0x74}], 0x1, &(0x7f0000002800)=[@op={0x18}, @iv={0xa0, 0x117, 0x2, 0x85, "b98f61ef647b7f51d174b52dae6d1c2bcbb4e9fcae8575c52506ad22977f85b570ac89f6ed1c253f85b7ecd6a3f53626d45ede646c1e73cc933f42a4e8e3d03d33e7f4447311f4194e81a6a74c2c2a4854ef3f31fed439ec8e579b37ed13456988ba2e8ba74a2d6f34a613f40568287b29d16938f0042f86e1981d7eba2d9168c924cbf4aa"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xa8, 0x117, 0x2, 0x8f, "aa151012902c04dc68d518fb0524d96080701994c110a1be6ab898f755f135014efa62ef37d0cdc05eb28f22e81adec9d20f394c36120ae29186fc37fe11ed9a3787b7956c34d1eb7164f667406d01de64356325874f195d20b04dd59c6056b712ac3e5205da6412eecaff0a22b4e2615fb9c880de3c2d018b0be50b7d1a00300de069b110012c5b544d082d30452d"}], 0x1178}], 0x1, 0x10)
accept$alg(r2, 0x0, 0x0)
write$binfmt_script(r9, 0x0, 0xb)
sendfile(r9, r1, 0x0, 0x10000a006)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
accept4$alg(r12, 0x0, 0x0, 0x0)

21:02:22 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fddbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="040044000439be768f7d2bc321897318086113bd2ebad0dbcbcc776baef8f45a3ae8d7b69515b0e5db403d5e2a2bdd3949be80c1a1ef8405d0b473c485d926513820af19a149c9ae5df10000f43b5f3e4faa98cce624578ba0271cbc144d0fee234dd830472c7e7b3ad0", @ANYRES16=r3, @ANYBLOB="080025bd7000fcdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
pipe(&(0x7f00000005c0))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0xb4c1737357779d99, 0x6}, 0x10)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000007c0)={0x0, 0x80000000}, &(0x7f0000000800)=0x8) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000e4", @ANYRES8=r0, @ANYRES16=r8, @ANYRES32=r8, @ANYRESHEX=r3], 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r12, r11, 0x0, 0x10000a006) (async)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r12, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="28009100", @ANYRES16=r6, @ANYBLOB="000125bd7000fbdbdf255300000008000300", @ANYRES32=r8, @ANYBLOB="04009900ff0300000000b50c"], 0x28}, 0x1, 0x0, 0x0, 0x20040084}, 0x10) (async)
sendfile(r10, r5, 0x0, 0x10000a006)

21:02:22 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xff03], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:22 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x500}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:22 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700400300000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:22 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fddbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="040044000439be768f7d2bc321897318086113bd2ebad0dbcbcc776baef8f45a3ae8d7b69515b0e5db403d5e2a2bdd3949be80c1a1ef8405d0b473c485d926513820af19a149c9ae5df10000f43b5f3e4faa98cce624578ba0271cbc144d0fee234dd830472c7e7b3ad0", @ANYRES16=r3, @ANYBLOB="080025bd7000fcdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async, rerun: 64)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (rerun: 64)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async, rerun: 64)
pipe(&(0x7f00000005c0)) (async, rerun: 64)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0xb4c1737357779d99, 0x6}, 0x10) (async)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000007c0)={0x0, 0x80000000}, &(0x7f0000000800)=0x8) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async, rerun: 64)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0}) (async, rerun: 32)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7) (rerun: 32)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000e4", @ANYRES8=r0, @ANYRES16=r8, @ANYRES32=r8, @ANYRESHEX=r3], 0x2c}}, 0x40880) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async, rerun: 64)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r12, r11, 0x0, 0x10000a006) (async, rerun: 32)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r12, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="28009100", @ANYRES16=r6, @ANYBLOB="000125bd7000fbdbdf255300000008000300", @ANYRES32=r8, @ANYBLOB="04009900ff0300000000b50c"], 0x28}, 0x1, 0x0, 0x0, 0x20040084}, 0x10) (async, rerun: 32)
sendfile(r10, r5, 0x0, 0x10000a006)

21:02:22 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x3ffff], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  646.033473][   T27] audit: type=1804 audit(1668891742.806:650): pid=23687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1058/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0
[  646.068951][T23699] recent_mt_check: 1 callbacks suppressed
[  646.068970][T23699] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:22 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x600}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  646.135843][   T27] audit: type=1804 audit(1668891742.916:651): pid=23680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1058/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0
[  646.257247][T23706] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  646.264788][   T27] audit: type=1804 audit(1668891743.006:652): pid=23696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1058/cgroup.controllers" dev="sda1" ino=1180 res=1 errno=0
[  646.353885][   T27] audit: type=1804 audit(1668891743.126:653): pid=23701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/936/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0
[  646.417955][   T27] audit: type=1804 audit(1668891743.126:654): pid=23703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/936/cgroup.controllers" dev="sda1" ino=1165 res=1 errno=0
[  647.113761][T10435] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
21:02:24 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x40000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:24 executing program 4:
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000001380)=ANY=[@ANYBLOB="edc87f891cdb00f4ea020c90619ce6518a634b4c181cb05bd543030fe173a82b356f3d3b05b536887e6b189eca86c11f05860cdcd0a4182d0308841173d930d2e8b4f12a705e41956c087e2bebfdf54df9fd003b0ac1d26524d0e8b1f5115a748538c2455f2945ecb0423d1ed536774d0bfa575121bee788532c6d3b5cc92e2290c300ecb4cfeadb73c4d36bff1e761505992f1da02bed895959a761b3f75fb33cff2b34f66dcbda6a6a58a46b4b5a82969d9086d264a39a165bcade236235660ce4a8e4454af94c24a8245ec6a2968054e2a62a184c75452b45d1a1878ccf3e294b65dcf2dbd3b6", @ANYRES16], 0x20}}, 0x0) (async)
unshare(0x6c060000)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
unshare(0x62000200) (async)
unshare(0x0) (async)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @remote, 0x9}, 0x1c) (async)
sendto$inet6(r3, 0x0, 0x0, 0x2200c011, &(0x7f0000000200)={0xa, 0x2, 0x0, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
unshare(0x20000000) (async)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
ioctl$int_in(r2, 0x5421, &(0x7f0000000040)=0x4) (async)
write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=r4], 0xfffffecc)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000240)=""/161, 0xa1, 0x2000, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x22}, 0x514}, 0x1c)
recvmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async, rerun: 64)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001480)={<r7=>r6, 0xfdc, 0xbf7, 0x2}) (async)
r8 = socket$netlink(0x10, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r8, 0x8983, &(0x7f0000000040)) (async)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000100)={<r9=>0x0}) (async)
unshare(0x2000100)
ioctl$BTRFS_IOC_TREE_SEARCH(r8, 0xd0009411, &(0x7f0000000300)={{r9, 0x0, 0x1000, 0x3, 0xfffffffffffffffd, 0x8, 0x1f, 0x3, 0x6, 0x40000000, 0x100, 0x1, 0x3, 0xcc}})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000240)={0x0, r9, "70bb59831a8cd9cff96435c37a0449e5681f76d4476b1c3587ae04cbd7b6dab245f50475ff7204bd4fb42ced26c2721bcf78ff5ae62b9c87b51e753f98363f538a5e2eed3ab7086453467eaa58bf7f6882f35daad51ce8d3783e13b29a9dee140e99eb4fdb122a121e035e5cdf6a987630837a43acfd250c15a144cad0a95153ea2fc3f455f92ce334ed958d209a3f4418cc3f46691cb5b5feb96ac088b7d26540de795705ad0cd56f3cb77821e2bbb66bf80106065894f25bf0100f128cddbf4489c1ee5caef7a7e5203924ba541d2997ff7185e22c32cdd616054c914338ac5093514a048eb92a302139d7272d184eb57d6bffe965e4deb91454a05069fc67", "2041a5c9c1c8e317d1f853763980e6681d88f089e3f27994f26b84576c7869610fcded56f7a230b80693d4a05869cb8ba6e0f818eeb6573f0658d5061b9a4c4dd423c23824029200c7d21996076651d93a86e4ac5e03e978ff32695513197487504b4a4fad14b50f193e86b1b1dedbc9c3d22db1afd754a6294783621c47d6e1000fabf77a78925423c3377d954c133ce19907b39714d76f0c161c09cb63036b7d1fb1cfe9302c9771ed076e301fa2726499b9cab193c3782d308e1db496b56323297de969f63d0128aa3c8a92d026be010974e728c9676b25ec9684aa169c8ba3dabe8ad9911ff84df1674e543b3c308b157c071fed1ecfa2c076de14ba2547d770ef76a1b5769855223b7d84a16c71cf7f5a0486261258e172ea3ec7f0c09d45c044e69a601cfd21169cfa343881d03d3c5f0021287421223944edf0606669603538e7e0f61dd5ff921ab682ddf3288497c37759872c96bf5d1d5807c2c0d4f4c760b3a5c239adf2047c4fbe338f48cfbb6780d75c1981e7d01838f7a6e251c935d7eb00640342ccecba9f32954731c72bab33ad98eed2ec5a028b08f37b017698a26c07dd9382c7cc95848bbec1ae41990884482843df320edc1c7cca0bf14d77c4cce9b4f21f5798c8044d3710f810204f89fe0a3b07d2d2fb8f75c2941a14fa35581c155ef58bc02cdb9c7656e2f5c08f748992fbe08004c4cd8f33b59335392152775ba596f0847c2c490dbc2c4d3005e1d291c686aae100fac20e635bcd7d7602eaa65f3713369014d6c761458072f211bcb165698f654e494bc789ccd5ccf68a3043614b484f5292a26ecb6652c51916a0f54abd25698f816d0e2313692a61853f3c9ffe8f13d456d9ed2bde5ce45144a61f562c18765be8c727959f15bc125f2207141f14bb7071a1c2318931c14ec6a158a30a9aa2f2d53a7fe21b558a64cf354098b6a406f109f159cdb5885a45016ff05592b53121a99dff4611f98ce9b699fe375c1eb8bf8dfa5894cec47b2873a33d5a1b66dbfbe54c24181107bb18c901915f5ecb0a4f91dc88fe75b41caecc6cf3856b0ba7c9f73ea0e2d302a69079a4b5296cce8873f5ed31a51a2def04d3e53ad4d2c67ea230c3ff71df56ca196fd70f93ee30e76c93cae8cc646442649ecb52118523aaba3a2a725305203efdcba3dca9b25af6b3a38587f815e151d315774e12040cbf2e674dc8b6a3d7423cbbcb178da0e061e71423d97ff292c42ee7ab5194817179529c47998b719ea1caeba4c21d7842b571902049f8d3db75bc34879629365858a861d2082c92be69a92ebdbf2da39db55875b22da767b31801bd5761d65813c25ef8ccb22dc27de80eebc4a99d48973180e0dc2d4815cd610cc012b27f1f2c36f1b634ddaa5d049c6629d7a77f2707207a2e7a9355e03db2eec561f0634cb9cd955785578a740e5688b5aaff764d37a12c55b5ff4e246c0a2bd8a2e7955c7aaba4f0bff823f391f1bbed87d8592b6b8f83f067d4f781ffa5531879121765c02c76e1555f03e15f9a9a81b42a489d464f8557b1805548c5afb3865d9ebc2ab71fc443d63a1b2d4e03a44b711ce5028988eb787509f403d3dc240e4c919d3881e15ba92286354d6f08c7198d0b88a8b7018d2863a8df0be390b3879d092bacdd91ffbc58aa15cd9fd2ffed77e9e17186abeb4bd09e6e7e57d77f4a23087d520c2d37c584d5411091149e41f9f760656be81938e5f8908aa7ce2cb40b1ad5b6bef21a480772cc5ed1dfc02ec827d193da9da892796666db1e526208817bb21ac9faf6b5ad5dafaa6aa1822306faa60852aad787b0530d12cf5357f8a500922b7e594ac955fc1048b056c0c5d6da44b3153a389f4953c6e76eba645f2ae2f3c0066674d01480e5fe3d176e55a9d971e26f10be526a53d4b7fd0d670775399553451046c3f7935357ef5629573c870b8bb22b14b1757c55481d52d68a8645efac812bb8af77e6e94aceed4bfb1de080ce1fee742692efeb9990d4a7936c9f91ac52713cb89bb6adff4ae05c566346bc86a39134844450bff61f73e7773c89eeed30b4133813864145c194924b61b0a85db3f3415a9f03c8d3d5c0fc4a938e78d1dfbd8460d170692e2b72bad1772893176c30833b910045a8d38e1448c5f15e2aec83fe7a9ba5f82445c7811fc7ae1e50cf2170a8e254c462c36c5ed985dc52bacab1a3a439de158bfbde3f1ba14348295dff3927f69e11deaabc16d37856f971ea06f16d7cf3b1cb84d5e33b07aa09fbe18194ef636a6022b12bddd0460c252baf056843aaf4c8e20e85c21106eb86cdf57165fcc246b7c0611a2fcb3fd1e48636571bd4a9986fe639d83f5d62df715a3b051b20836e68e8ef2205c50e354640fa95cfc98595d04a342a565bbeb43cd7fbd7c9ed38f0fe73affd67baf4207074a568d50bbe5f7e0efac3be5993228c77761c2d884207891522e5a2dfddfee8293f0f9d64e1d45137dc9cd98a551c362fd36ce6e708b07c4dbfdef957daa3d571a96beddce5a6cee47ad37c8b32a762e4d6d7cece180a2450fcc511a42745002b7d07e7f47e2465557762ae57d0e642bea2e3e9899cc969bc5928934a3677fa061c7747419ac3fce3be6aebdefa4aead30e92996bd3e3cecf1ee6de64b6b9c5d2f6d736424c1315cac4334fe3cbec1578d6878c1996b8079736667e681199170526403abbf8d38f681622e006a58384f9c06ef664287080dea09d386a4056a077c1afd530a1686da5005e78ae9f8017b551b8e83a1d5a4dcd579b31cb95530882e7429ac0818c47edcad854a342ffab229fba194a8713a79c61d04d449e83ce0da32ecba46f2b5158026ee1c0c05dcc0718b3352f53cc6ee10c832f4529e7c888a10f25819eb6afc62e1c355d9d97297803ddef312da59ded57624ab91420959399ea0fe1545950e5e48f107255cfa2b41fbe6187f846f73a1574ac41e549b8217c2643bbfa05f8952e13f90a73ca8f6637a0b2d841df6ccf71d2b3b1cf5874d6570d0d3411cc0814979f06a612d50a95f4668019961176d837220cd4c01ea7df29792bc5f7ab43027676821fac5ac374045f6831590ab239252df6585c9ff46f00b2dc7357d93c04b483d93f15495282f9569e389a018b1ed1dd2fbebbc4acc7bab9fb922ee53d5b531aad38b61c21fdf34d3e5d07394da908f9a493742685e17aba8fc3e3f7fae074a02eb02410de0913bf4f4f13d813407a0734eff5069ec79de87dbbc42417a20c62dfedfa66bfc4606bfd5d719d2a5fc395d6297e0e0bcfe0d8e8ae90abb397b116bbdedba0980bb0c77351e8de6f72ca876fee713ef9e2c3bc23435b497ed4d6effe025e1c798b8e620e4c6b7652b874286bd3ad483b38d1247c987e0fc3e6a2ee5de558323d4bad25dc253e351c05d9a8432eeb1300879cdb5bff3dfc66ee3be57addba02dc49c31303c78f61689c2a09c1b896a661dfeb4ba102f555ed71a4100cf0a246720301991db05626a85aeb92e890f9da1b48593098eb4cafcc4f5220c1faabd03c824e47d2924a357d74c2d182bfd2cd22473e2e09373096a163cce8ff4a17f9204650701fb73464d59b7dac0b6e07c5879fb9e8eff0b8817e149ff3b6d3700cbbef7f85229a1612f26e3d3e2d754102e8a606fb2c7eeab88bf437173818292a31aa89fa2370c237471468ff5b5a61a9ae3b3a7c6be37d3a3771e1ac482f4c3e451195f9eb7610c92b8b58063527e927a51b9bb3e3ad031b3c80d4a986096ad7c13f16c155a93d1cfd1b48eca77206eec6d735bd07307f8e1b0194ea1b99fd8ec82046fe62534635367c62e72660267223597007cefdcd88f797b023143483250c98809e24e2e161255f4357c2db49171dca100ece2f7c5f3a3ff9f238fa65036f10afda4a2ffcc28804725ef5821852b066fc790cca3e8e38f3ea44f12e19954226a7a6606241e3cfc691c2415be90b6820f92ce4779070688a1e56ec21b8594780f657218af244a04ff2ceb171971cd376a97b185180546d4588eb77e4916200dcf4445833b7376294eddcabac3faf0bab6519bd0667bc17bcb596af7f6a3fb3c1fa89cb7fbb907bb279159c3e35eb05e3f913b5b09b276c38ed37f42f8da8eb05869811554a2d7aff15abd3041776a6a117ff6fe555f0b3ae3204ca82139ef9779ea80fef0fee01e68904d88cd7f7708cdc6941be9dc40a0d6b60e9857ca0feb1bb7f5439731f406cbf1bf7c27dbf5edebcfc36a3f2a548c74da13d1b0e8763caefec340c64996413e83d20230e668a0ceb0ada882b63b0c3e9ec3cb084f59c7479ff419c2ba62a62fcacfc88d57a752d7248a856b82e5474d79db3e3a25c0f6aba17dd3b9d39cb541c07e6e5fbd4a1a1b18e436d3abf93f270b3c95d42d49f22bd7b0e6287fdc830170baa49b1b3aa3e0afd7c89ca589b2e7ced26c2a65ff65c1c84d0f26a3d589569c105b744f2df6caaea79840139a51aa52fe80c4bf1db85681caecbc28d96a9761bac3531764ff101b217fb0dd522b2174dc4fd2f4920309b3a6f311c9d051cae8d5f2c2cc1da33f30a8b8c2a465fe292d13325ca1d090685c7df5288c9506213a188d3ac21bb9a659f2c5755afa01515462461993efe749f12a573bfefc191b4f4144309d55e9888f61db39b809af8fd04d61eb1d686d00a4e5e20be61df12ab104d6323a84e0c7b47fc0e24233edb8510e17fade112f5cc972a8ab7dd8d98cb9979fdfbbf261f798846599ad879c44655024ce86be4517bfbbe3f2fc2c306516536e2b0f23a9c9bca454cf0bff0b374083ac4def4da51e56b60bd6c9a1f2cf0be480fce0f80ef8900fc6163d3c777ec55e2bd108c73d5c4cb756bc8a18997e957a080291f678400816d2e1f30d31e95eeff3e983252443659e5ce3370690f8ec3fa03ad3bf485495941d7ee3459bab25e0cc96cdf83d4bcbf8a471da5f8d8f72e0f6810d00003193b787b79f4013d9a07d0167c9726413376f47685d0afb6c0e94b3cd840e016730ef7fa64739ef3957f7727e2024dfc4197e62da19c6623fcd691ad152262633a4c0dfce5c86e4b739495c903215a0a8bd081702e648ffef77dd35e3f0bbfcff1023a1c2fffa5da3909b488845e8a150cae95aaf2feec6102667910b37377d05c5583e9a2e086acf38d15bad74c66b39cdd6671f31b21ed5f70900f3e54224d998dc118ecc00ef6c9a4a2eb6bdd793a06663b9a9a2e27e47ed33ade91b12d24640738af2b5c94f94bb2b4e354c94125ff0fe3f42ce860eb2a4037b1f142705d41b2e3b027ce9ee6fcb485a062a397100a194cac1446c9c37bb71551bc4b4b2dbf36438b81c2bf9e08e03b5a5aeb55691fc8063a080f9d7858473d028ccc8927f34a72024ca782c70484e77a85f8707c51e2401497698f4c"}) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000001340)=0xb, 0x4) (async)
splice(r0, 0x0, r2, 0x0, 0x200002b2, 0x0)

21:02:24 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700034000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:24 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x700}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:24 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r2)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x60, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x10040000)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00082cbd7000fddbdf25040001000000000000807a300000000014000200626f6e645f736c6176655f3100000000050004000100000005000400010000000900030073797a30000000000900030073797a320000000014000200766c616e3100"/106], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r11, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r7, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x20, 0x77}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r11, r6, 0x0, 0x10000a006)

21:02:24 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d", 0x4)
pipe(&(0x7f0000000200))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x10000a006)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x10000a006)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0)
r8 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
r9 = accept$alg(r8, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x7000000}}], 0xe100, 0x0, 0x0)
clock_gettime(0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendfile(r11, r10, 0x0, 0x10000a006) (async)
sendmmsg$alg(r10, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="27b3cedd7e9abb73e0e688b6eff689ee7f00b2ae2bf46995ef1cc4b19077a8d4bf826a9dc0bee63eebe58c5eb218f9a7bc8ab8e414ad4f6fdc9f34983fc38ad4aadeaebdbb885c3987c33fa6b453da53d0b2777d54e83dbbabf08124e9c58db183ee764111651b1d70836a1a2eb7c38518b8f9e0", 0x74}], 0x1, &(0x7f0000002800)=[@op={0x18}, @iv={0xa0, 0x117, 0x2, 0x85, "b98f61ef647b7f51d174b52dae6d1c2bcbb4e9fcae8575c52506ad22977f85b570ac89f6ed1c253f85b7ecd6a3f53626d45ede646c1e73cc933f42a4e8e3d03d33e7f4447311f4194e81a6a74c2c2a4854ef3f31fed439ec8e579b37ed13456988ba2e8ba74a2d6f34a613f40568287b29d16938f0042f86e1981d7eba2d9168c924cbf4aa"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xa8, 0x117, 0x2, 0x8f, "aa151012902c04dc68d518fb0524d96080701994c110a1be6ab898f755f135014efa62ef37d0cdc05eb28f22e81adec9d20f394c36120ae29186fc37fe11ed9a3787b7956c34d1eb7164f667406d01de64356325874f195d20b04dd59c6056b712ac3e5205da6412eecaff0a22b4e2615fb9c880de3c2d018b0be50b7d1a00300de069b110012c5b544d082d30452d"}], 0x1178}], 0x1, 0x10) (async)
accept$alg(r2, 0x0, 0x0)
write$binfmt_script(r9, 0x0, 0xb) (async)
sendfile(r9, r1, 0x0, 0x10000a006) (async)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
accept4$alg(r12, 0x0, 0x0, 0x0)

[  648.147079][T23716] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:24 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x1000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:25 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007fffff000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  648.179142][   T27] audit: type=1804 audit(1668891744.956:655): pid=23715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1059/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0
21:02:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xed4}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  648.232994][   T27] audit: type=1804 audit(1668891744.986:656): pid=23715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1059/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0
21:02:25 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x2000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  648.314968][T23729] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:25 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x1202}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  648.369274][   T27] audit: type=1804 audit(1668891744.986:657): pid=23717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1059/cgroup.controllers" dev="sda1" ino=1181 res=1 errno=0
21:02:25 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000001000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:25 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (rerun: 32)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d", 0x4) (async)
pipe(&(0x7f0000000200)) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x10000a006) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendfile(r6, r5, 0x0, 0x10000a006)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0)
r8 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
r9 = accept$alg(r8, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x7000000}}], 0xe100, 0x0, 0x0) (async, rerun: 64)
clock_gettime(0x0, 0x0) (async, rerun: 64)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r11, r10, 0x0, 0x10000a006)
sendmmsg$alg(r10, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="27b3cedd7e9abb73e0e688b6eff689ee7f00b2ae2bf46995ef1cc4b19077a8d4bf826a9dc0bee63eebe58c5eb218f9a7bc8ab8e414ad4f6fdc9f34983fc38ad4aadeaebdbb885c3987c33fa6b453da53d0b2777d54e83dbbabf08124e9c58db183ee764111651b1d70836a1a2eb7c38518b8f9e0", 0x74}], 0x1, &(0x7f0000002800)=[@op={0x18}, @iv={0xa0, 0x117, 0x2, 0x85, "b98f61ef647b7f51d174b52dae6d1c2bcbb4e9fcae8575c52506ad22977f85b570ac89f6ed1c253f85b7ecd6a3f53626d45ede646c1e73cc933f42a4e8e3d03d33e7f4447311f4194e81a6a74c2c2a4854ef3f31fed439ec8e579b37ed13456988ba2e8ba74a2d6f34a613f40568287b29d16938f0042f86e1981d7eba2d9168c924cbf4aa"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xa8, 0x117, 0x2, 0x8f, "aa151012902c04dc68d518fb0524d96080701994c110a1be6ab898f755f135014efa62ef37d0cdc05eb28f22e81adec9d20f394c36120ae29186fc37fe11ed9a3787b7956c34d1eb7164f667406d01de64356325874f195d20b04dd59c6056b712ac3e5205da6412eecaff0a22b4e2615fb9c880de3c2d018b0be50b7d1a00300de069b110012c5b544d082d30452d"}], 0x1178}], 0x1, 0x10) (async, rerun: 64)
accept$alg(r2, 0x0, 0x0) (async, rerun: 64)
write$binfmt_script(r9, 0x0, 0xb) (async)
sendfile(r9, r1, 0x0, 0x10000a006) (async)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
accept4$alg(r12, 0x0, 0x0, 0x0)

[  648.499126][T23738] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  648.521598][   T27] audit: type=1804 audit(1668891745.136:658): pid=23721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/937/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0
21:02:28 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r2)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x60, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x10040000)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00082cbd7000fddbdf25040001000000000000807a300000000014000200626f6e645f736c6176655f3100000000050004000100000005000400010000000900030073797a30000000000900030073797a320000000014000200766c616e3100"/106], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r11, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r7, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x20, 0x77}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r11, r6, 0x0, 0x10000a006)

21:02:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x3000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x1f00}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:28 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000002000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:28 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d", 0x4)
pipe(&(0x7f0000000200))
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r4, r3, 0x0, 0x10000a006)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r6, r5, 0x0, 0x10000a006)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r7, 0x0)
r8 = openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
r9 = accept$alg(r8, 0x0, 0x0)
recvmmsg(r9, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x7000000}}], 0xe100, 0x0, 0x0)
clock_gettime(0x0, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r11, r10, 0x0, 0x10000a006)
sendmmsg$alg(r10, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="27b3cedd7e9abb73e0e688b6eff689ee7f00b2ae2bf46995ef1cc4b19077a8d4bf826a9dc0bee63eebe58c5eb218f9a7bc8ab8e414ad4f6fdc9f34983fc38ad4aadeaebdbb885c3987c33fa6b453da53d0b2777d54e83dbbabf08124e9c58db183ee764111651b1d70836a1a2eb7c38518b8f9e0", 0x74}], 0x1, &(0x7f0000002800)=[@op={0x18}, @iv={0xa0, 0x117, 0x2, 0x85, "b98f61ef647b7f51d174b52dae6d1c2bcbb4e9fcae8575c52506ad22977f85b570ac89f6ed1c253f85b7ecd6a3f53626d45ede646c1e73cc933f42a4e8e3d03d33e7f4447311f4194e81a6a74c2c2a4854ef3f31fed439ec8e579b37ed13456988ba2e8ba74a2d6f34a613f40568287b29d16938f0042f86e1981d7eba2d9168c924cbf4aa"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0xa8, 0x117, 0x2, 0x8f, "aa151012902c04dc68d518fb0524d96080701994c110a1be6ab898f755f135014efa62ef37d0cdc05eb28f22e81adec9d20f394c36120ae29186fc37fe11ed9a3787b7956c34d1eb7164f667406d01de64356325874f195d20b04dd59c6056b712ac3e5205da6412eecaff0a22b4e2615fb9c880de3c2d018b0be50b7d1a00300de069b110012c5b544d082d30452d"}], 0x1178}], 0x1, 0x10)
accept$alg(r2, 0x0, 0x0)
write$binfmt_script(r9, 0x0, 0xb)
sendfile(r9, r1, 0x0, 0x10000a006)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8)
accept4$alg(r12, 0x0, 0x0, 0x0)

21:02:28 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async, rerun: 64)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r2)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x60, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x10040000)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 64)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00082cbd7000fddbdf25040001000000000000807a300000000014000200626f6e645f736c6176655f3100000000050004000100000005000400010000000900030073797a30000000000900030073797a320000000014000200766c616e3100"/106], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r11, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r7, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x20, 0x77}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (async, rerun: 64)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (rerun: 64)
sendfile(r11, r6, 0x0, 0x10000a006)

21:02:28 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000003000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x8030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  651.359422][T23750] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x2000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:28 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r2)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)={0x60, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x10040000) (async)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0}) (async)
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00082cbd7000fddbdf25040001000000000000807a300000000014000200626f6e645f736c6176655f3100000000050004000100000005000400010000000900030073797a30000000000900030073797a320000000014000200766c616e3100"/106], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_LEAVE_IBSS(r11, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r7, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x20, 0x77}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) (async)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r11, r6, 0x0, 0x10000a006)

21:02:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x3f000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  651.534706][   T27] audit: type=1804 audit(1668891748.306:659): pid=23752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1061/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0
21:02:28 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000004000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  651.581502][T23771] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  651.657216][   T27] audit: type=1804 audit(1668891748.316:660): pid=23752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1061/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0
21:02:28 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x3f000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x40000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x4800}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:28 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
getsockopt(r9, 0x3f, 0x1, &(0x7f00000005c0)=""/237, &(0x7f00000006c0)=0xed)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
splice(0xffffffffffffffff, &(0x7f0000000700)=0x100000000, r1, &(0x7f0000000740)=0xdc, 0xdc40, 0x9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r4, 0x0, 0x10000a006)

[  651.747594][   T27] audit: type=1804 audit(1668891748.376:661): pid=23760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1552087229/syzkaller.QQeVPb/1042/cgroup.controllers" dev="sda1" ino=1183 res=1 errno=0
[  651.787743][T23785] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  651.831968][   T27] audit: type=1804 audit(1668891748.386:662): pid=23761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1061/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0
21:02:28 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000227bd7000fddbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="040044000439be768f7d2bc321897318086113bd2ebad0dbcbcc776baef8f45a3ae8d7b69515b0e5db403d5e2a2bdd3949be80c1a1ef8405d0b473c485d926513820af19a149c9ae5df10000f43b5f3e4faa98cce624578ba0271cbc144d0fee234dd830472c7e7b3ad0", @ANYRES16=r3, @ANYBLOB="080025bd7000fcdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
pipe(&(0x7f00000005c0))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x0, 0xb4c1737357779d99, 0x6}, 0x10)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000007c0)={0x0, 0x80000000}, &(0x7f0000000800)=0x8)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000e4", @ANYRES8=r0, @ANYRES16=r8, @ANYRES32=r8, @ANYRESHEX=r3], 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r12, r11, 0x0, 0x10000a006)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r12, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="28009100", @ANYRES16=r6, @ANYBLOB="000125bd7000fbdbdf255300000008000300", @ANYRES32=r8, @ANYBLOB="04009900ff0300000000b50c"], 0x28}, 0x1, 0x0, 0x0, 0x20040084}, 0x10)
sendfile(r10, r5, 0x0, 0x10000a006)

21:02:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x4c00}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:28 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000005000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x43030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:28 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x8030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x79000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  651.930377][   T27] audit: type=1804 audit(1668891748.486:663): pid=23779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1061/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0
[  652.005638][T23797] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:28 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000006000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x4c02}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:28 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x43030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  652.035009][   T27] audit: type=1804 audit(1668891748.696:664): pid=23787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/940/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0
21:02:28 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x86030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:28 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6) (async)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
getsockopt(r9, 0x3f, 0x1, &(0x7f00000005c0)=""/237, &(0x7f00000006c0)=0xed) (async)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
splice(0xffffffffffffffff, &(0x7f0000000700)=0x100000000, r1, &(0x7f0000000740)=0xdc, 0xdc40, 0x9) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r10, r4, 0x0, 0x10000a006)

21:02:28 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000007000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  652.198984][T23808] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:29 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x86030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x6000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:29 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
getsockopt(r9, 0x3f, 0x1, &(0x7f00000005c0)=""/237, &(0x7f00000006c0)=0xed)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
splice(0xffffffffffffffff, &(0x7f0000000700)=0x100000000, r1, &(0x7f0000000740)=0xdc, 0xdc40, 0x9)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r4, 0x0, 0x10000a006)

21:02:29 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000008000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:29 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x91020000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:29 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6) (async)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
getsockopt(r9, 0x3f, 0x1, &(0x7f00000005c0)=""/237, &(0x7f00000006c0)=0xed)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
splice(0xffffffffffffffff, &(0x7f0000000700)=0x100000000, r1, &(0x7f0000000740)=0xdc, 0xdc40, 0x9) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r4, 0x0, 0x10000a006)

21:02:29 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000009000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:29 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x94020000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  652.493002][T23826] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x6800}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000003c0)={0x6, 0x6, 0x4})
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x0, 0x11, 0x148, 0x0, 0x10, 0x2c0, 0x2a8, 0x2a8, 0x2c0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x0, {0x0, 0x6800}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0x17}, {@ipv6=@empty, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv6=@dev}], 0x1}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET3={0x38}}, {{@ip={@local, @local, 0x0, 0x0, 'syzkaller0\x00', 'vcan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)

21:02:29 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xa1030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:29 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000600))
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r6)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:29 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070000000a000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x6c00}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  652.673001][T23840] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  652.710604][T23841] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  652.822151][T23847] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:29 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc0002011})
unshare(0x20000)
unshare(0x80)
unshare(0x40040000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xffff, 0xbb75, 0xdfa, 0x1, r0, 0xff, '\x00', 0x0, r0, 0x3, 0x4, 0x3, 0x4}, 0x48)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000200)=""/141, 0x8d, 0x5, 0x7fffffff})

21:02:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7400}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000003c0)={0x6, 0x6, 0x4}) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x0, 0x11, 0x148, 0x0, 0x10, 0x2c0, 0x2a8, 0x2a8, 0x2c0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x0, {0x0, 0x6800}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0x17}, {@ipv6=@empty, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv6=@dev}], 0x1}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET3={0x38}}, {{@ip={@local, @local, 0x0, 0x0, 'syzkaller0\x00', 'vcan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)

21:02:29 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xa9010000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:29 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070000000e000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:29 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xb0030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:29 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070000000f000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  652.984865][T23860] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  652.992587][T23861] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:29 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000003c0)={0x6, 0x6, 0x4}) (async)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x358, 0x0, 0x11, 0x148, 0x0, 0x10, 0x2c0, 0x2a8, 0x2a8, 0x2c0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x228, 0x0, {0x0, 0x6800}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [], @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0x17}, {@ipv6=@empty, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv6=@dev}], 0x1}}, @common=@ttl={{0x28}}]}, @common=@inet=@SET3={0x38}}, {{@ip={@local, @local, 0x0, 0x0, 'syzkaller0\x00', 'vcan0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)

21:02:29 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7a00}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  653.170647][T23873] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  653.171869][T23871] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:30 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async, rerun: 32)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async, rerun: 32)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000600)) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r6) (async, rerun: 64)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async, rerun: 32)
sendfile(r9, r4, 0x0, 0x10000a006) (rerun: 32)

21:02:30 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070000003f000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7b01}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:30 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc0002011})
unshare(0x20000)
unshare(0x80)
unshare(0x40040000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xffff, 0xbb75, 0xdfa, 0x1, r0, 0xff, '\x00', 0x0, r0, 0x3, 0x4, 0x3, 0x4}, 0x48)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000200)=""/141, 0x8d, 0x5, 0x7fffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc0002011}) (async)
unshare(0x20000) (async)
unshare(0x80) (async)
unshare(0x40040000) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xffff, 0xbb75, 0xdfa, 0x1, r0, 0xff, '\x00', 0x0, r0, 0x3, 0x4, 0x3, 0x4}, 0x48) (async)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000200)=""/141, 0x8d, 0x5, 0x7fffffff}) (async)

21:02:30 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xb8020000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:30 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x4d4, 0x33}, 0x0, @in=@loopback, 0x0, 0x1, 0x0, 0xa}}, 0xe8)
listen(r0, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x22, 0x7, "400372e844"}, @mptcp=@generic={0x0, 0x12, "000000000000d3540000000000000000"}, @timestamp={0x8, 0xa}, @eol, @md5sig={0x13, 0x12, "f1d27369abb309a13c79ef48fd87f3ec"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0)

21:02:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7c02}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:30 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000048000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:30 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000600)) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r6) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:30 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x4d4, 0x33}, 0x0, @in=@loopback, 0x0, 0x1, 0x0, 0xa}}, 0xe8) (async)
listen(r0, 0x0) (async)
syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x22, 0x7, "400372e844"}, @mptcp=@generic={0x0, 0x12, "000000000000d3540000000000000000"}, @timestamp={0x8, 0xa}, @eol, @md5sig={0x13, 0x12, "f1d27369abb309a13c79ef48fd87f3ec"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0)

21:02:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xa502}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:30 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070000004c000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:30 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xc0020000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:30 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000060000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:30 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xa800}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:32 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc0002011})
unshare(0x20000)
unshare(0x80)
unshare(0x40040000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xffff, 0xbb75, 0xdfa, 0x1, r0, 0xff, '\x00', 0x0, r0, 0x3, 0x4, 0x3, 0x4}, 0x48)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000200)=""/141, 0x8d, 0x5, 0x7fffffff})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) (async)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc0002011}) (async)
unshare(0x20000) (async)
unshare(0x80) (async)
unshare(0x40040000) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0xffff, 0xbb75, 0xdfa, 0x1, r0, 0xff, '\x00', 0x0, r0, 0x3, 0x4, 0x3, 0x4}, 0x48) (async)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000000c0)={&(0x7f0000000200)=""/141, 0x8d, 0x5, 0x7fffffff}) (async)

21:02:32 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xc8010000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:32 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r10, r9, 0x0, 0x10000a006)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r11, &(0x7f0000001580)={0x0, 0xf000000, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r12, 0x940acf2123e37741}, 0x14}}, 0x0)
sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r12, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40042)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)={0x14, r8, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x800)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r13, r4, 0x0, 0x10000a006)

21:02:32 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async, rerun: 64)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, {{@in, 0x4d4, 0x33}, 0x0, @in=@loopback, 0x0, 0x1, 0x0, 0xa}}, 0xe8) (async, rerun: 64)
listen(r0, 0x0) (async)
syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, {[@nop, @fastopen={0x22, 0x7, "400372e844"}, @mptcp=@generic={0x0, 0x12, "000000000000d3540000000000000000"}, @timestamp={0x8, 0xa}, @eol, @md5sig={0x13, 0x12, "f1d27369abb309a13c79ef48fd87f3ec"}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0)

21:02:32 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000068000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xad03}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:32 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xd0030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:32 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070000006c000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xb003}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:32 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000600))
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r6)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:32 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xe8030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:32 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000473000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  655.866162][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  655.866180][   T27] audit: type=1804 audit(1668891752.646:669): pid=23928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/946/cgroup.controllers" dev="sda1" ino=1157 res=1 errno=0
[  655.952854][   T27] audit: type=1804 audit(1668891752.706:670): pid=23928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/946/cgroup.controllers" dev="sda1" ino=1157 res=1 errno=0
[  656.080954][   T27] audit: type=1804 audit(1668891752.856:671): pid=23943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1070/cgroup.controllers" dev="sda1" ino=1179 res=1 errno=0
21:02:32 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000600))
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r6)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:32 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xbc02}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:33 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r10, r9, 0x0, 0x10000a006) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r11, &(0x7f0000001580)={0x0, 0xf000000, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r12, 0x940acf2123e37741}, 0x14}}, 0x0)
sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r12, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40042)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)={0x14, r8, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x800) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r13, r4, 0x0, 0x10000a006)

21:02:33 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xf4000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:33 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000074000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xc002}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xcd00}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:33 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xf9030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:33 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070000007a000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:33 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r10, r9, 0x0, 0x10000a006)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r11, &(0x7f0000001580)={0x0, 0xf000000, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r12, 0x940acf2123e37741}, 0x14}}, 0x0)
sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r12, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40042)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)={0x14, r8, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x800)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r13, r4, 0x0, 0x10000a006)

[  656.368159][   T27] audit: type=1804 audit(1668891753.146:672): pid=23957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1552087229/syzkaller.QQeVPb/1050/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0
21:02:33 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007ffffff9e000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:33 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xfe030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  656.456615][T23971] recent_mt_check: 8 callbacks suppressed
[  656.456634][T23971] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:33 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007fffffff0000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:33 executing program 4:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @bcast}, [@bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000380), 0xfffffc77)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = accept$unix(r1, &(0x7f0000000140), &(0x7f0000000000)=0x6e)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x110, r2, 0xf7480000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x7ef}, 0xe)
socket(0x0, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000026c0)={<r4=>0x0, <r5=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f0000000c00)=""/87, 0x57}], 0x3, &(0x7f00000004c0)=""/83, 0x53}, 0x800}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002280)=""/73, 0x49}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000900)=""/231, 0xe7}, {&(0x7f0000000a00)=""/52, 0x34}], 0x7}, 0x550}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ac0)=""/33, 0x21}], 0x1}, 0x1d}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/95, 0x5f}], 0x1}, 0x4}, {{&(0x7f0000002200)=@ax25={{}, [@netrom, @netrom, @bcast, @rose, @remote, @bcast, @bcast]}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, &(0x7f0000001cc0)=""/50, 0x32}, 0x2}, {{&(0x7f0000001d00)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d80)=""/19, 0x13}, {&(0x7f0000001dc0)=""/90, 0x5a}], 0x2, &(0x7f0000001e80)=""/163, 0xa3}, 0x1}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001f40)=""/217, 0xd9}, {&(0x7f0000002040)=""/195, 0xc3}], 0x2, &(0x7f0000002180)=""/111, 0x6f}, 0x8001}, {{0x0, 0x0, &(0x7f0000002340)}, 0x80000001}, {{&(0x7f0000002380)=@isdn, 0x80, &(0x7f0000002440)=[{&(0x7f0000002400)=""/41, 0x29}], 0x1}, 0x459}], 0x9, 0x40, &(0x7f0000002700)={r4, r5+10000000})
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x5dd, 0x40012062, 0x0)
listen(r0, 0x0)

21:02:33 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 64)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async, rerun: 32)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r10, r9, 0x0, 0x10000a006) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r11, &(0x7f0000001580)={0x0, 0xf000000, &(0x7f0000001540)={&(0x7f0000001500)={0x14, r12, 0x940acf2123e37741}, 0x14}}, 0x0)
sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r12, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40042)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)={0x14, r8, 0x400, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x800)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r13, r4, 0x0, 0x10000a006)

21:02:33 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xfeffffff], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xd40e}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:33 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700f0ffff000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:33 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xff000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  656.706993][T23991] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:33 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
sendmsg$DEVLINK_CMD_RATE_DEL(r7, 0xffffffffffffffff, 0x8040)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000d8fb870000", @ANYRES16=r9, @ANYBLOB="00082cbd7000fddbdf25040000000900030073797a300000000014000200626f6e645f736c6176655f3100000000050004000100000005000400010000000900030073797a30000000000900030073797a320000000014000200766c616e3100"/106], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="28002600940900000800b7007c000000d1baeea309b43860f42631adced5cda3ff802a7f195c0140f6c177c54404e43372fab28c3f2d893834f90a8c7afe4b68730339daa7715da891ac252692403be298ecfcf487d19e6b885ba6ead30eeee1ede74b08872d2bbc76b63272ecb9284275d56d55b267803400fa090c7836bb653335a1cc29f1558f97"], 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r4, 0x0, 0x10000a006)

21:02:33 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xf803}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  656.774880][   T27] audit: type=1804 audit(1668891753.556:673): pid=23980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1071/cgroup.controllers" dev="sda1" ino=1155 res=1 errno=0
[  656.883341][T24004] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  656.894659][   T27] audit: type=1804 audit(1668891753.566:674): pid=23980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1071/cgroup.controllers" dev="sda1" ino=1155 res=1 errno=0
[  657.011608][   T27] audit: type=1804 audit(1668891753.786:675): pid=24005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/949/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0
[  657.025310][T24005] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
21:02:34 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500077fffffff000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:34 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xff030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:34 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xfa03}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:34 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async, rerun: 64)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async, rerun: 64)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff})
sendmsg$DEVLINK_CMD_RATE_DEL(r7, 0xffffffffffffffff, 0x8040) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000d8fb870000", @ANYRES16=r9, @ANYBLOB="00082cbd7000fddbdf25040000000900030073797a300000000014000200626f6e645f736c6176655f3100000000050004000100000005000400010000000900030073797a30000000000900030073797a320000000014000200766c616e3100"/106], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="28002600940900000800b7007c000000d1baeea309b43860f42631adced5cda3ff802a7f195c0140f6c177c54404e43372fab28c3f2d893834f90a8c7afe4b68730339daa7715da891ac252692403be298ecfcf487d19e6b885ba6ead30eeee1ede74b08872d2bbc76b63272ecb9284275d56d55b267803400fa090c7836bb653335a1cc29f1558f97"], 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r4, 0x0, 0x10000a006)

[  657.331296][T24014] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:34 executing program 4:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @bcast}, [@bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
listen(r0, 0x0)
unshare(0x40000000) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000380), 0xfffffc77) (async)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = accept$unix(r1, &(0x7f0000000140), &(0x7f0000000000)=0x6e)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x110, r2, 0xf7480000) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x7ef}, 0xe)
socket(0x0, 0x0, 0x0) (async)
bind$packet(0xffffffffffffffff, 0x0, 0x0) (async)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000026c0)={<r4=>0x0, <r5=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f0000000c00)=""/87, 0x57}], 0x3, &(0x7f00000004c0)=""/83, 0x53}, 0x800}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002280)=""/73, 0x49}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000900)=""/231, 0xe7}, {&(0x7f0000000a00)=""/52, 0x34}], 0x7}, 0x550}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ac0)=""/33, 0x21}], 0x1}, 0x1d}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/95, 0x5f}], 0x1}, 0x4}, {{&(0x7f0000002200)=@ax25={{}, [@netrom, @netrom, @bcast, @rose, @remote, @bcast, @bcast]}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, &(0x7f0000001cc0)=""/50, 0x32}, 0x2}, {{&(0x7f0000001d00)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d80)=""/19, 0x13}, {&(0x7f0000001dc0)=""/90, 0x5a}], 0x2, &(0x7f0000001e80)=""/163, 0xa3}, 0x1}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001f40)=""/217, 0xd9}, {&(0x7f0000002040)=""/195, 0xc3}], 0x2, &(0x7f0000002180)=""/111, 0x6f}, 0x8001}, {{0x0, 0x0, &(0x7f0000002340)}, 0x80000001}, {{&(0x7f0000002380)=@isdn, 0x80, &(0x7f0000002440)=[{&(0x7f0000002400)=""/41, 0x29}], 0x1}, 0x459}], 0x9, 0x40, &(0x7f0000002700)={r4, r5+10000000})
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x5dd, 0x40012062, 0x0)
listen(r0, 0x0)

21:02:34 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x80005, 0xc8, &(0x7f00000004c0)=""/200, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xf)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001640)={'tunl0\x00', &(0x7f00000018c0)={'tunl0\x00', <r4=>0x0, 0x40, 0x1, 0x8, 0x5, {{0x1a, 0x4, 0x2, 0x38, 0x68, 0x65, 0x6db, 0x86, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x24, 0xc8, 0x1, 0x4, [{@rand_addr=0x64010101, 0x400020}, {@private=0xa010100}, {@remote, 0x5}, {@rand_addr=0x64010101, 0x9}]}, @timestamp={0x44, 0x8, 0x14, 0x0, 0x5, [0x0]}, @end, @noop, @ssrr={0x89, 0x23, 0x0, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @multicast2, @multicast1, @remote, @private=0xa010102]}]}}}}})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000000007000000963bb7e3d912d8a0be53e5f29e398bb5d0907909b866cda0ee7c4240ae69143e09205fb4278a632c76c8a99bb8b7720853e824d37c96f758e5f8d71a430a256813ba915af6662eaf79dee1d9941e30790853972a64aa1d528cf07d9bae98aec2b386ae827a8aa71e9c0c02452efba0e999c1175b50748eb44cc35fb385c463494aa6e9e23130a2084ac378563cf5018a8a"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_journal_start\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0xb, &(0x7f00000017c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x1, 0x2, 0x5, 0x6, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4cc956eb, 0x0, 0x0, 0x0, 0x8}, @generic={0x40, 0x4, 0x6, 0x5, 0x81}, @call={0x85, 0x0, 0x0, 0x1a}, @alu={0x7, 0x1, 0x4, 0x8, 0xa}, @exit], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x39, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x5, 0x6, 0xffff, 0x5}, 0x10, 0x0, r5, 0x0, &(0x7f0000001700)=[r0]}, 0x80)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28012, r3, 0x0)
close(r3)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
pipe(&(0x7f0000001a00)={<r7=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r7, 0x5760, 0x0)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r11 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r10, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r11}]}, 0x3c}}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r13, r12, 0x0, 0x10000a006)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x58, r10, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r12}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000100)={0x10})
sendfile(r6, r2, 0x0, 0x100000001)

21:02:34 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xffff0300], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:34 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500079effffff000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:34 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xfc03}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:34 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async, rerun: 64)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
pipe(&(0x7f0000000000)={<r7=>0xffffffffffffffff}) (rerun: 32)
sendmsg$DEVLINK_CMD_RATE_DEL(r7, 0xffffffffffffffff, 0x8040) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000d8fb870000", @ANYRES16=r9, @ANYBLOB="00082cbd7000fddbdf25040000000900030073797a300000000014000200626f6e645f736c6176655f3100000000050004000100000005000400010000000900030073797a30000000000900030073797a320000000014000200766c616e3100"/106], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="28002600940900000800b7007c000000d1baeea309b43860f42631adced5cda3ff802a7f195c0140f6c177c54404e43372fab28c3f2d893834f90a8c7afe4b68730339daa7715da891ac252692403be298ecfcf487d19e6b885ba6ead30eeee1ede74b08872d2bbc76b63272ecb9284275d56d55b267803400fa090c7836bb653335a1cc29f1558f97"], 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async, rerun: 64)
sendfile(r10, r4, 0x0, 0x10000a006) (rerun: 64)

21:02:34 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0xfffffffe], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  657.626366][T24027] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:34 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007f0ffffff000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:34 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x40000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:34 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x168, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x4000804)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

[  657.776231][   T27] audit: type=1804 audit(1668891754.556:676): pid=24035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/951/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0
21:02:34 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700020000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:34 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  657.856341][T24044] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  657.886428][   T27] audit: type=1804 audit(1668891754.556:677): pid=24035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/951/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0
[  657.999980][   T27] audit: type=1804 audit(1668891754.556:678): pid=24035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/951/cgroup.controllers" dev="sda1" ino=1172 res=1 errno=0
21:02:34 executing program 4:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @bcast}, [@bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000380), 0xfffffc77)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = accept$unix(r1, &(0x7f0000000140), &(0x7f0000000000)=0x6e)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x110, r2, 0xf7480000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x7ef}, 0xe)
socket(0x0, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000026c0)={<r4=>0x0, <r5=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f0000000c00)=""/87, 0x57}], 0x3, &(0x7f00000004c0)=""/83, 0x53}, 0x800}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002280)=""/73, 0x49}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000900)=""/231, 0xe7}, {&(0x7f0000000a00)=""/52, 0x34}], 0x7}, 0x550}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ac0)=""/33, 0x21}], 0x1}, 0x1d}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/95, 0x5f}], 0x1}, 0x4}, {{&(0x7f0000002200)=@ax25={{}, [@netrom, @netrom, @bcast, @rose, @remote, @bcast, @bcast]}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, &(0x7f0000001cc0)=""/50, 0x32}, 0x2}, {{&(0x7f0000001d00)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d80)=""/19, 0x13}, {&(0x7f0000001dc0)=""/90, 0x5a}], 0x2, &(0x7f0000001e80)=""/163, 0xa3}, 0x1}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001f40)=""/217, 0xd9}, {&(0x7f0000002040)=""/195, 0xc3}], 0x2, &(0x7f0000002180)=""/111, 0x6f}, 0x8001}, {{0x0, 0x0, &(0x7f0000002340)}, 0x80000001}, {{&(0x7f0000002380)=@isdn, 0x80, &(0x7f0000002440)=[{&(0x7f0000002400)=""/41, 0x29}], 0x1}, 0x459}], 0x9, 0x40, &(0x7f0000002700)={r4, r5+10000000})
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x5dd, 0x40012062, 0x0)
listen(r0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @bcast}, [@bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async)
listen(r0, 0x0) (async)
unshare(0x40000000) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async)
write$cgroup_int(r1, &(0x7f0000000380), 0xfffffc77) (async)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
accept$unix(r1, &(0x7f0000000140), &(0x7f0000000000)=0x6e) (async)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x110, r2, 0xf7480000) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x7ef}, 0xe) (async)
socket(0x0, 0x0, 0x0) (async)
bind$packet(0xffffffffffffffff, 0x0, 0x0) (async)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) (async)
clock_gettime(0x0, &(0x7f00000026c0)) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f0000000c00)=""/87, 0x57}], 0x3, &(0x7f00000004c0)=""/83, 0x53}, 0x800}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002280)=""/73, 0x49}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000900)=""/231, 0xe7}, {&(0x7f0000000a00)=""/52, 0x34}], 0x7}, 0x550}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ac0)=""/33, 0x21}], 0x1}, 0x1d}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/95, 0x5f}], 0x1}, 0x4}, {{&(0x7f0000002200)=@ax25={{}, [@netrom, @netrom, @bcast, @rose, @remote, @bcast, @bcast]}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, &(0x7f0000001cc0)=""/50, 0x32}, 0x2}, {{&(0x7f0000001d00)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d80)=""/19, 0x13}, {&(0x7f0000001dc0)=""/90, 0x5a}], 0x2, &(0x7f0000001e80)=""/163, 0xa3}, 0x1}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001f40)=""/217, 0xd9}, {&(0x7f0000002040)=""/195, 0xc3}], 0x2, &(0x7f0000002180)=""/111, 0x6f}, 0x8001}, {{0x0, 0x0, &(0x7f0000002340)}, 0x80000001}, {{&(0x7f0000002380)=@isdn, 0x80, &(0x7f0000002440)=[{&(0x7f0000002400)=""/41, 0x29}], 0x1}, 0x459}], 0x9, 0x40, &(0x7f0000002700)={r4, r5+10000000}) (async)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x5dd, 0x40012062, 0x0) (async)
listen(r0, 0x0) (async)

21:02:35 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0)) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x80005, 0xc8, &(0x7f00000004c0)=""/200, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xf)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001640)={'tunl0\x00', &(0x7f00000018c0)={'tunl0\x00', <r4=>0x0, 0x40, 0x1, 0x8, 0x5, {{0x1a, 0x4, 0x2, 0x38, 0x68, 0x65, 0x6db, 0x86, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x24, 0xc8, 0x1, 0x4, [{@rand_addr=0x64010101, 0x400020}, {@private=0xa010100}, {@remote, 0x5}, {@rand_addr=0x64010101, 0x9}]}, @timestamp={0x44, 0x8, 0x14, 0x0, 0x5, [0x0]}, @end, @noop, @ssrr={0x89, 0x23, 0x0, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @multicast2, @multicast1, @remote, @private=0xa010102]}]}}}}}) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000000007000000963bb7e3d912d8a0be53e5f29e398bb5d0907909b866cda0ee7c4240ae69143e09205fb4278a632c76c8a99bb8b7720853e824d37c96f758e5f8d71a430a256813ba915af6662eaf79dee1d9941e30790853972a64aa1d528cf07d9bae98aec2b386ae827a8aa71e9c0c02452efba0e999c1175b50748eb44cc35fb385c463494aa6e9e23130a2084ac378563cf5018a8a"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_journal_start\x00', r5}, 0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0xb, &(0x7f00000017c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x1, 0x2, 0x5, 0x6, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4cc956eb, 0x0, 0x0, 0x0, 0x8}, @generic={0x40, 0x4, 0x6, 0x5, 0x81}, @call={0x85, 0x0, 0x0, 0x1a}, @alu={0x7, 0x1, 0x4, 0x8, 0xa}, @exit], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x39, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x5, 0x6, 0xffff, 0x5}, 0x10, 0x0, r5, 0x0, &(0x7f0000001700)=[r0]}, 0x80) (async)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x3af4701e) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28012, r3, 0x0)
close(r3) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
pipe(&(0x7f0000001a00)={<r7=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r7, 0x5760, 0x0)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r11 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r10, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r11}]}, 0x3c}}, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r13, r12, 0x0, 0x10000a006) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x58, r10, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r12}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) (async)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000100)={0x10}) (async)
sendfile(r6, r2, 0x0, 0x100000001)

21:02:35 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700030000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:35 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xe0ffff}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:35 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x2], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:35 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x168, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x4000804)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:35 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  658.310704][T24066] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:35 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700040000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:35 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x1000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:35 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async, rerun: 32)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)={0x168, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x168}, 0x1, 0x0, 0x0, 0x4}, 0x4000804)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:35 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x4], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:35 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000000c0))
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x80005, 0xc8, &(0x7f00000004c0)=""/200, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xf) (async)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001640)={'tunl0\x00', &(0x7f00000018c0)={'tunl0\x00', <r4=>0x0, 0x40, 0x1, 0x8, 0x5, {{0x1a, 0x4, 0x2, 0x38, 0x68, 0x65, 0x6db, 0x86, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x24, 0xc8, 0x1, 0x4, [{@rand_addr=0x64010101, 0x400020}, {@private=0xa010100}, {@remote, 0x5}, {@rand_addr=0x64010101, 0x9}]}, @timestamp={0x44, 0x8, 0x14, 0x0, 0x5, [0x0]}, @end, @noop, @ssrr={0x89, 0x23, 0x0, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @multicast2, @multicast1, @remote, @private=0xa010102]}]}}}}}) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000000007000000963bb7e3d912d8a0be53e5f29e398bb5d0907909b866cda0ee7c4240ae69143e09205fb4278a632c76c8a99bb8b7720853e824d37c96f758e5f8d71a430a256813ba915af6662eaf79dee1d9941e30790853972a64aa1d528cf07d9bae98aec2b386ae827a8aa71e9c0c02452efba0e999c1175b50748eb44cc35fb385c463494aa6e9e23130a2084ac378563cf5018a8a"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='ext4_journal_start\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0xc, 0xb, &(0x7f00000017c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @ldst={0x3, 0x1, 0x2, 0x5, 0x6, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4cc956eb, 0x0, 0x0, 0x0, 0x8}, @generic={0x40, 0x4, 0x6, 0x5, 0x81}, @call={0x85, 0x0, 0x0, 0x1a}, @alu={0x7, 0x1, 0x4, 0x8, 0xa}, @exit], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x39, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x5, 0x6, 0xffff, 0x5}, 0x10, 0x0, r5, 0x0, &(0x7f0000001700)=[r0]}, 0x80) (async)
write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x3af4701e) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28012, r3, 0x0)
close(r3) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
pipe(&(0x7f0000001a00)={<r7=>0xffffffffffffffff})
ioctl$sock_inet_udp_SIOCINQ(r7, 0x5760, 0x0)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async, rerun: 32)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
r11 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r10, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r11}]}, 0x3c}}, 0x0) (async)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r13, r12, 0x0, 0x10000a006) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x58, r10, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r12}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1f}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x8000) (async)
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000100)={0x10})
sendfile(r6, r2, 0x0, 0x100000001)

[  658.493454][T24091] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:35 executing program 4:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @bcast}, [@bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
listen(r0, 0x0)
unshare(0x40000000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000380), 0xfffffc77)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
socket$nl_sock_diag(0x10, 0x3, 0x4)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r2 = accept$unix(r1, &(0x7f0000000140), &(0x7f0000000000)=0x6e)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x110, r2, 0xf7480000)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed, 0x7ef}, 0xe)
socket(0x0, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
clock_gettime(0x0, &(0x7f00000026c0)={<r4=>0x0, <r5=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f00000001c0)=@x25, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f00000003c0)=""/206, 0xce}, {&(0x7f0000000c00)=""/87, 0x57}], 0x3, &(0x7f00000004c0)=""/83, 0x53}, 0x800}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000002280)=""/73, 0x49}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000640)=""/173, 0xad}, {&(0x7f0000000700)=""/220, 0xdc}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000900)=""/231, 0xe7}, {&(0x7f0000000a00)=""/52, 0x34}], 0x7}, 0x550}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000ac0)=""/33, 0x21}], 0x1}, 0x1d}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/95, 0x5f}], 0x1}, 0x4}, {{&(0x7f0000002200)=@ax25={{}, [@netrom, @netrom, @bcast, @rose, @remote, @bcast, @bcast]}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000c80)=""/4096, 0x1000}], 0x1, &(0x7f0000001cc0)=""/50, 0x32}, 0x2}, {{&(0x7f0000001d00)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d80)=""/19, 0x13}, {&(0x7f0000001dc0)=""/90, 0x5a}], 0x2, &(0x7f0000001e80)=""/163, 0xa3}, 0x1}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001f40)=""/217, 0xd9}, {&(0x7f0000002040)=""/195, 0xc3}], 0x2, &(0x7f0000002180)=""/111, 0x6f}, 0x8001}, {{0x0, 0x0, &(0x7f0000002340)}, 0x80000001}, {{&(0x7f0000002380)=@isdn, 0x80, &(0x7f0000002440)=[{&(0x7f0000002400)=""/41, 0x29}], 0x1}, 0x459}], 0x9, 0x40, &(0x7f0000002700)={r4, r5+10000000})
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}], 0x5dd, 0x40012062, 0x0)
listen(r0, 0x0)

21:02:35 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x187000, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:35 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x2000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:35 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700050000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:35 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x79], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:35 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700060000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  658.694274][T24102] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:35 executing program 5:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffd91a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@setlink={0x70, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan1\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffffffe0}}]}]}, @IFLA_LINKMODE={0x5}, @IFLA_MTU={0x8, 0x4, 0x3ff}]}, 0x70}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x24040004}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000ff0100000000b269676b9298e3c7a3056fd0113b6a821754eb2a372cf9561fe39a8d8f8a8a2d5f841406b2b2cc9729e2b31bee07377788056ed60fcd6dd2ac7c5fa9cfee00"/90, @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040))
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0})
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r13=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x1, 0x0, 0x3, 0x8, 0x8, 0xfffffffffffffff8, 0x1}]}, &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xe, 0x81, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x80)
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r10, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xf}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x60}}, 0x0)

21:02:35 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x3000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:35 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xf4], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:35 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700070000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  658.860508][T24117] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:35 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x1a9], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:35 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x4000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  658.943921][ T3681] Bluetooth: hci5: command 0x0405 tx timeout
[  659.148905][T24115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  659.189099][T24115] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  659.223094][T24122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  659.308002][T24115] device team0 entered promiscuous mode
[  659.313920][T24115] device team_slave_0 entered promiscuous mode
[  659.320646][T24115] device team_slave_1 entered promiscuous mode
[  659.334661][T24115] device bond3 entered promiscuous mode
[  659.355837][T24115] device team0 left promiscuous mode
[  659.368304][T24115] device team_slave_0 left promiscuous mode
[  659.392620][T24115] device team_slave_1 left promiscuous mode
[  659.419350][T24115] device bond3 left promiscuous mode
21:02:36 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x187000, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:36 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700080000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:36 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x5000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:36 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x1c8], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:36 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x187000, 0x0) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:36 executing program 5:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffd91a)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@setlink={0x70, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan1\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffffffe0}}]}]}, @IFLA_LINKMODE={0x5}, @IFLA_MTU={0x8, 0x4, 0x3ff}]}, 0x70}}, 0x0) (async, rerun: 64)
r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x24040004}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000ff0100000000b269676b9298e3c7a3056fd0113b6a821754eb2a372cf9561fe39a8d8f8a8a2d5f841406b2b2cc9729e2b31bee07377788056ed60fcd6dd2ac7c5fa9cfee00"/90, @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040))
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) (async, rerun: 32)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) (async, rerun: 32)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0}) (async)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0}) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r13=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x1, 0x0, 0x3, 0x8, 0x8, 0xfffffffffffffff8, 0x1}]}, &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xe, 0x81, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x80)
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r10, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) (async)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xf}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x60}}, 0x0)

21:02:36 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x291], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:36 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x6000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  659.708376][T24141] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
21:02:36 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700090000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:36 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x187000, 0x0)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r9, r4, 0x0, 0x10000a006)

[  659.764194][T24141] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
21:02:36 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x294], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:36 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:37 executing program 4:
unshare(0x40000400)
unshare(0x20000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

21:02:37 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000a0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:37 executing program 5:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffd91a) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@setlink={0x70, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_IFALIAS={0x14, 0x14, 'ipvlan1\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xffffffe0}}]}]}, @IFLA_LINKMODE={0x5}, @IFLA_MTU={0x8, 0x4, 0x3ff}]}, 0x70}}, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000ff0100000000b269676b9298e3c7a3056fd0113b6a821754eb2a372cf9561fe39a8d8f8a8a2d5f841406b2b2cc9729e2b31bee07377788056ed60fcd6dd2ac7c5fa9cfee00"/90, @ANYRES32=r3, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0) (async)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000480)={0x0, 0x28, &(0x7f0000000540)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r6, @ANYBLOB="01000000002200001c0012000c000100626f6e640000"], 0x3c}}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r9=>0x0}) (async)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00', <r12=>0x0}) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r13=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x1, 0x0, 0x3, 0x8, 0x8, 0xfffffffffffffff8, 0x1}]}, &(0x7f0000000440)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x4, '\x00', r13, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xe, 0x81, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x80)
setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r10, &(0x7f0000000100)={0x2c, 0x0, r12}, 0x10) (async)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140c}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xf}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x60}}, 0x0)

21:02:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x2b8], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:37 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fddb5f257673696d0000000f0002006e657464657673696d3000000a00030000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000acbc286f2b7af155c5057e8d540b22e93300e5c0740037676379a3513dd915af903d38c3c8b0598d74fb552c3d969f69b041d86e0378c8e9c631dee1baaef34cc0030e0853619e2a9dec7bfc7a9f72bd6098ce8e18d19cb84cf9b195b0e880d43d2dc6a1"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:37 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x12020000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:37 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x1f000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x2c0], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  660.499864][T24175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
21:02:37 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000e0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  660.564965][T24175] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
21:02:37 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x20000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:37 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfea7)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001})
pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000100)="f2", 0x1}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfa64})

21:02:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x300], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:37 executing program 4:
unshare(0x40000400) (async)
unshare(0x20000000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
unshare(0x0)
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

21:02:37 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000f0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:37 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x48000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:37 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async, rerun: 64)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fddb5f257673696d0000000f0002006e657464657673696d3000000a00030000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000acbc286f2b7af155c5057e8d540b22e93300e5c0740037676379a3513dd915af903d38c3c8b0598d74fb552c3d969f69b041d86e0378c8e9c631dee1baaef34cc0030e0853619e2a9dec7bfc7a9f72bd6098ce8e18d19cb84cf9b195b0e880d43d2dc6a1"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async, rerun: 64)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async, rerun: 32)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async, rerun: 64)
sendfile(r9, r4, 0x0, 0x10000a006) (rerun: 64)

21:02:37 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x308], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:37 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfea7)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001})
pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000100)="f2", 0x1}], 0x1, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfa64})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) (async)
openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfea7) (async)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) (async)
pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000100)="f2", 0x1}], 0x1, 0x0, 0x0) (async)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfa64}) (async)

21:02:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x4c000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:38 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x343], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:38 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700480000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:38 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fddb5f257673696d0000000f0002006e657464657673696d3000000a00030000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000acbc286f2b7af155c5057e8d540b22e93300e5c0740037676379a3513dd915af903d38c3c8b0598d74fb552c3d969f69b041d86e0378c8e9c631dee1baaef34cc0030e0853619e2a9dec7bfc7a9f72bd6098ce8e18d19cb84cf9b195b0e880d43d2dc6a1"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:38 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x386], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x4c020000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:40 executing program 4:
unshare(0x40000400) (async)
unshare(0x20000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x0)
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000040)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) (async)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

21:02:40 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007004c0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) (async, rerun: 64)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (rerun: 64)
write$binfmt_script(r0, &(0x7f0000000140)=ANY=[], 0xfea7) (async)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0xc000, 0xd001}) (async)
pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000100)="f2", 0x1}], 0x1, 0x0, 0x0) (async, rerun: 32)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfa64}) (rerun: 32)

21:02:40 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
r1 = accept4$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0xff, 0x63, 0x5, 0x2, 0x3, 0x80000001, 0x178, 0x38, 0x3b, 0x401, 0x76, 0x20, 0x2, 0xb9, 0x5, 0x2}, [{0x70000000, 0xdf99, 0x7ff, 0x7ff, 0x2, 0xa53b, 0x0, 0x7}, {0x70000000, 0x800, 0x3a65, 0x81, 0x8, 0x8, 0xfffffc01, 0xe8a}], "5b68a2cad58ebecf69f7413e9a46cd61120e89834a1d56cc42e593078d790f32785ad5d547a25106d5b85e91f3c1747dd72b3409cfbaf79fec10f6dad4941a916efc9eb0d4cb86218bd851c289d605d1bed2bdfbf41bb5cc46acd6d43593fde3456a621e180be907d8228c85c6804208f82a56b22be9f321f7b88995ce439d9106f2721fdd6652ae734d08c4773b1d2e638a046097e643e030606718f1fc2cc29eee9ee7e31288a1", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000004c0))
sendfile(r10, r5, 0x0, 0x10000a006)

21:02:40 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x60000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:40 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3a1], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:40 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3b0], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  663.460894][T24242] recent_mt_check: 10 callbacks suppressed
[  663.460914][T24242] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:40 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700600000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:40 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x68000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:40 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fddb5f257673696d0000000f0002006e657464657673696d3000000a00030000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000acbc286f2b7af155c5057e8d540b22e93300e5c0740037676379a3513dd915af903d38c3c8b0598d74fb552c3d969f69b041d86e0378c8e9c631dee1baaef34cc0030e0853619e2a9dec7bfc7a9f72bd6098ce8e18d19cb84cf9b195b0e880d43d2dc6a1"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

[  663.597543][   T27] kauditd_printk_skb: 23 callbacks suppressed
[  663.597562][   T27] audit: type=1804 audit(1668891760.376:702): pid=24244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/961/cgroup.controllers" dev="sda1" ino=1157 res=1 errno=0
21:02:40 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3d0], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  663.685994][T24259] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:40 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700680000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  663.879378][   T27] audit: type=1804 audit(1668891760.656:703): pid=24261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1081/cgroup.controllers" dev="sda1" ino=1167 res=1 errno=0
21:02:41 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3e8], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:41 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x6c000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:41 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
r1 = accept4$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0xff, 0x63, 0x5, 0x2, 0x3, 0x80000001, 0x178, 0x38, 0x3b, 0x401, 0x76, 0x20, 0x2, 0xb9, 0x5, 0x2}, [{0x70000000, 0xdf99, 0x7ff, 0x7ff, 0x2, 0xa53b, 0x0, 0x7}, {0x70000000, 0x800, 0x3a65, 0x81, 0x8, 0x8, 0xfffffc01, 0xe8a}], "5b68a2cad58ebecf69f7413e9a46cd61120e89834a1d56cc42e593078d790f32785ad5d547a25106d5b85e91f3c1747dd72b3409cfbaf79fec10f6dad4941a916efc9eb0d4cb86218bd851c289d605d1bed2bdfbf41bb5cc46acd6d43593fde3456a621e180be907d8228c85c6804208f82a56b22be9f321f7b88995ce439d9106f2721fdd6652ae734d08c4773b1d2e638a046097e643e030606718f1fc2cc29eee9ee7e31288a1", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000004c0))
sendfile(r10, r5, 0x0, 0x10000a006)

21:02:41 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007006c0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:41 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fddb5f257673696d0000000f0002006e657464657673696d3000000a00030000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000acbc286f2b7af155c5057e8d540b22e93300e5c0740037676379a3513dd915af903d38c3c8b0598d74fb552c3d969f69b041d86e0378c8e9c631dee1baaef34cc0030e0853619e2a9dec7bfc7a9f72bd6098ce8e18d19cb84cf9b195b0e880d43d2dc6a1"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:41 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r0, 0x9}, 0x10)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0], 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28012, r0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4000, 0x0, @local, 0x20000d}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048080)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000b00)=0x81)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000600)={<r7=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6)
r8 = openat$cgroup_procs(r7, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
preadv(r8, &(0x7f0000000a80)=[{&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000800)=""/113, 0x71}, {&(0x7f00000005c0)=""/51, 0x33}, {&(0x7f0000000880)=""/208, 0xd0}, {&(0x7f0000000980)=""/216, 0xd8}], 0x8, 0x0, 0x9)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000)
sendfile(r4, r3, 0x0, 0x80000000003)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/215, 0xd7}], 0x2, 0x3, 0x5)

21:02:41 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700740000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:41 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3f9], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  664.455090][T24277] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:41 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x74000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  664.526889][   T27] audit: type=1804 audit(1668891761.306:704): pid=24281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/962/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0
21:02:41 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3fe], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:41 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
r1 = accept4$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000640)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0xff, 0x63, 0x5, 0x2, 0x3, 0x80000001, 0x178, 0x38, 0x3b, 0x401, 0x76, 0x20, 0x2, 0xb9, 0x5, 0x2}, [{0x70000000, 0xdf99, 0x7ff, 0x7ff, 0x2, 0xa53b, 0x0, 0x7}, {0x70000000, 0x800, 0x3a65, 0x81, 0x8, 0x8, 0xfffffc01, 0xe8a}], "5b68a2cad58ebecf69f7413e9a46cd61120e89834a1d56cc42e593078d790f32785ad5d547a25106d5b85e91f3c1747dd72b3409cfbaf79fec10f6dad4941a916efc9eb0d4cb86218bd851c289d605d1bed2bdfbf41bb5cc46acd6d43593fde3456a621e180be907d8228c85c6804208f82a56b22be9f321f7b88995ce439d9106f2721fdd6652ae734d08c4773b1d2e638a046097e643e030606718f1fc2cc29eee9ee7e31288a1", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xa20) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r2=>0xffffffffffffffff}) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000004c0))
sendfile(r10, r5, 0x0, 0x10000a006)

21:02:41 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007007a0000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  664.619920][T24292] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  664.701443][   T27] audit: type=1804 audit(1668891761.476:705): pid=24274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1082/cgroup.controllers" dev="sda1" ino=1154 res=1 errno=0
21:02:42 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x803], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7a000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:42 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700f00000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:42 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={{}, 0x8, 0x3, 0x80000000})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x90, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x6, 0xffff]}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xd3}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x941}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xb8ec67d}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000041}, 0x80)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000180))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x78, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r11, r6, 0x0, 0x10000a006)
socket$nl_generic(0x10, 0x3, 0x10)

21:02:42 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r0, 0x9}, 0x10)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0], 0x3af4701e) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28012, r0, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4000, 0x0, @local, 0x20000d}, 0x1c) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048080) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async, rerun: 32)
ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000b00)=0x81) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000600)={<r7=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6) (async)
r8 = openat$cgroup_procs(r7, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
preadv(r8, &(0x7f0000000a80)=[{&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000800)=""/113, 0x71}, {&(0x7f00000005c0)=""/51, 0x33}, {&(0x7f0000000880)=""/208, 0xd0}, {&(0x7f0000000980)=""/216, 0xd8}], 0x8, 0x0, 0x9) (async, rerun: 64)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000) (async, rerun: 64)
sendfile(r4, r3, 0x0, 0x80000000003) (async)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/215, 0xd7}], 0x2, 0x3, 0x5)

21:02:42 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x2000000)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f00000001c0))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0x12)
sendfile(r1, r2, 0x0, 0xf03b0000)

21:02:42 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000300000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:42 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3f00], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  665.377191][T24312] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7b010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:42 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0) (async)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r0, 0x9}, 0x10)
write$binfmt_script(r2, &(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0], 0x3af4701e) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28012, r0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4000, 0x0, @local, 0x20000d}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048080) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
ioctl$AUTOFS_IOC_SETTIMEOUT(r6, 0x80049367, &(0x7f0000000b00)=0x81) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
pipe(&(0x7f0000000600)={<r7=>0xffffffffffffffff}) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6)
r8 = openat$cgroup_procs(r7, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
preadv(r8, &(0x7f0000000a80)=[{&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/240, 0xf0}, {&(0x7f0000000800)=""/113, 0x71}, {&(0x7f00000005c0)=""/51, 0x33}, {&(0x7f0000000880)=""/208, 0xd0}, {&(0x7f0000000980)=""/216, 0xd8}], 0x8, 0x0, 0x9) (async)
write$cgroup_int(r5, &(0x7f0000000200), 0x806000)
sendfile(r4, r3, 0x0, 0x80000000003)
r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r9, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/215, 0xd7}], 0x2, 0x3, 0x5)

21:02:42 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x2000000)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f00000001c0)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000) (async)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0x12) (async)
sendfile(r1, r2, 0x0, 0xf03b0000)

21:02:42 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x4000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  665.544891][   T27] audit: type=1804 audit(1668891762.326:706): pid=24305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/964/cgroup.controllers" dev="sda1" ino=1178 res=1 errno=0
[  665.585824][T24328] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:42 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700730400000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7c020000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f0000000d00)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
r5 = socket(0x3, 0x5, 0x5)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xda, @remote, 0x3}, {0xa, 0x4e23, 0x8001, @private0, 0x103}, 0x1, {[0xffff, 0x2, 0x3, 0x8, 0x7fff, 0x2, 0x6000000, 0x3]}}, 0x5c)

[  665.739334][T24339] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  665.834353][T24341] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
21:02:42 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={{}, 0x8, 0x3, 0x80000000}) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r4, 0x1}, 0x14}}, 0x0) (async)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x90, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x6, 0xffff]}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xd3}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x941}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xb8ec67d}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000041}, 0x80)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000180)) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x78, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r11, r6, 0x0, 0x10000a006)
socket$nl_generic(0x10, 0x3, 0x10)

21:02:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r1=>0x0}) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f0000000d00)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async, rerun: 64)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (rerun: 64)
getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
r5 = socket(0x3, 0x5, 0x5)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xda, @remote, 0x3}, {0xa, 0x4e23, 0x8001, @private0, 0x103}, 0x1, {[0xffff, 0x2, 0x3, 0x8, 0x7fff, 0x2, 0x6000000, 0x3]}}, 0x5c)

21:02:42 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x4303], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:42 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x2000000)
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f00000001c0))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0x12)
sendfile(r1, r2, 0x0, 0xf03b0000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x2000000) (async)
pipe(&(0x7f0000000180)) (async)
ioctl$PPPIOCGIDLE32(r3, 0x8008743f, &(0x7f00000001c0)) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x0, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_int(r4, &(0x7f0000000200), 0xf000) (async)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0) (async)
write$cgroup_int(r0, &(0x7f0000000000), 0x12) (async)
sendfile(r1, r2, 0x0, 0xf03b0000) (async)

21:02:42 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000500000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xa5020000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:42 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x7900], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  665.944912][T24347] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:42 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000600000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xa8000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  665.985866][T24352] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
21:02:42 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x8603], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1f, 0x6, 0x81)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x40000003)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff)
bind$ax25(r3, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x40044)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000400000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='rxrpc_recvmsg\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x400000000000118, 0x0, '\x00', [{}, {0xffffffff}]})

[  666.063249][T24352] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  666.099792][T24369] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:42 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000700000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  666.114229][T24352] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  666.143998][T24352] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
21:02:43 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000240)={{}, 0x8, 0x3, 0x80000000}) (async)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r4, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x90, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x0, 0x6, 0xffff]}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_PROTOINFO={0x38, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x34, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xd3}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x800}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7ff}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x941}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xb8ec67d}]}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000180)) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0}) (async)
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r8)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x78, r10, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r11, r6, 0x0, 0x10000a006) (async)
socket$nl_generic(0x10, 0x3, 0x10)

[  666.193092][T24352] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  666.233222][T24352] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  666.264641][T24373] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
[  666.326149][T24352] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  666.348295][T24352] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  666.375061][T24352] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
21:02:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', <r1=>0x0})
r2 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r2, &(0x7f0000000d00)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
r5 = socket(0x3, 0x5, 0x5)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xda, @remote, 0x3}, {0xa, 0x4e23, 0x8001, @private0, 0x103}, 0x1, {[0xffff, 0x2, 0x3, 0x8, 0x7fff, 0x2, 0x6000000, 0x3]}}, 0x5c)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) (async)
socket$packet(0x11, 0x2, 0x300) (async)
bind$packet(r2, &(0x7f0000000d00)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async)
pipe(&(0x7f0000000040)) (async)
getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) (async)
socket(0x3, 0x5, 0x5) (async)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0xda, @remote, 0x3}, {0xa, 0x4e23, 0x8001, @private0, 0x103}, 0x1, {[0xffff, 0x2, 0x3, 0x8, 0x7fff, 0x2, 0x6000000, 0x3]}}, 0x5c) (async)

21:02:43 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xad030000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:43 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x9102], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:43 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000900000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x1f, 0x6, 0x81) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x40000003)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff)
bind$ax25(r3, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x40044) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000400000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='rxrpc_recvmsg\x00', r6}, 0x10) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x400000000000118, 0x0, '\x00', [{}, {0xffffffff}]})

21:02:43 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000005c0)=r0, 0x4)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r4, 0x0, 0x10000a006)

21:02:43 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x9402], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:43 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000a00000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  666.488255][T24389] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x1f, 0x6, 0x81)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x803, 0x40000003)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff)
bind$ax25(r3, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x40044) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000400000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='rxrpc_recvmsg\x00', r6}, 0x10) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x400000000000118, 0x0, '\x00', [{}, {0xffffffff}]})

21:02:43 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xb0030000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:43 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xa103], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  666.626460][   T27] audit: type=1804 audit(1668891763.406:707): pid=24390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/967/cgroup.controllers" dev="sda1" ino=1174 res=1 errno=0
21:02:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x1f, 0x6, 0x81)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x40000003)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r1)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), 0xffffffffffffffff)
bind$ax25(r3, &(0x7f0000000300)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x8}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r5, 0x300, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8800}, 0x40044)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000400000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='rxrpc_recvmsg\x00', r6}, 0x10)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000200)={0x0, 0x0, 0x400000000000118, 0x0, '\x00', [{}, {0xffffffff}]})

21:02:43 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000e00000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:43 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xbc020000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  666.680688][T24409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
21:02:43 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000f00000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:43 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xc0020000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r1, @ANYBLOB="00800040000001c40000008142b0004800680000000490780a010100000000ff8317abac1e0001acac1e00016401010101940400000144145923ffffffff00000042e00000010001000000000000000018000000"]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})

[  666.799103][T24417] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
21:02:43 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6) (async)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000005c0)=r0, 0x4) (async)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r10, r4, 0x0, 0x10000a006)

21:02:43 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xcd000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:43 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xa901], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:43 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700003f00000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:43 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0bef704c", @ANYRES16=r1, @ANYBLOB="43c10000000000000000250000000500290000000000"], 0x1c}}, 0x0)

21:02:43 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xd40e0000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:43 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xb003], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:43 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0bef704c", @ANYRES16=r1, @ANYBLOB="43c10000000000000000250000000500290000000000"], 0x1c}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0bef704c", @ANYRES16=r1, @ANYBLOB="43c10000000000000000250000000500290000000000"], 0x1c}}, 0x0) (async)

21:02:43 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r1, @ANYBLOB="00800040000001c40000008142b0004800680000000490780a010100000000ff8317abac1e0001acac1e00016401010101940400000144145923ffffffff00000042e00000010001000000000000000018000000"]}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})

21:02:43 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700004800000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:43 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xf8030000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:43 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xb802], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:44 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=r1, @ANYBLOB="00800040000001c40000008142b0004800680000000490780a010100000000ff8317abac1e0001acac1e00016401010101940400000144145923ffffffff00000042e00000010001000000000000000018000000"]})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})

21:02:44 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async, rerun: 32)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async, rerun: 32)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async, rerun: 64)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6) (async)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000005c0)=r0, 0x4)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r4, 0x0, 0x10000a006)

21:02:44 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0bef704c", @ANYRES16=r1, @ANYBLOB="43c10000000000000000250000000500290000000000"], 0x1c}}, 0x0)

21:02:44 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700004c00000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:44 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xfa030000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xc002], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:44 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={<r3=>0x0}, &(0x7f0000000440)=0xffffffffffffff3f)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @empty}}, 0xff80, 0x10}, 0x90)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r3, 0x80000003}, 0xc)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={<r4=>r3, @in={{0x2, 0x4e1f, @remote}}, 0x1000004, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x5}, &(0x7f0000000280)=0x9c)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000480), &(0x7f0000000900)=0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000005c0)=ANY=[@ANYRES32=<r5=>r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c)
close(r0)

21:02:44 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f11002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = socket(0x10, 0x8000000000000003, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r4, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x6f496b1860f0031e}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)={0xdb0, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xbd, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x178}], @NL80211_ATTR_CSA_IES={0xce8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xfff8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x3, 0xb08, 0x1572, 0x4, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1000, 0x1, 0x7fff]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4e, 0x80, [@tim={0x5, 0x15, {0x4, 0x8f, 0x2, "c015867df3e7a647ef328321f59a5c64062d"}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mic={0x8c, 0x18, {0xab1, "cb2a7ad83e01", @long="a45f08a08e9d163a6581ca87e06a3121"}}, @peer_mgmt={0x75, 0x4, {0x0, 0x1, @void, @void, @void}}, @channel_switch={0x25, 0x3, {0x0, 0x5, 0x7}}]}, @NL80211_ATTR_PROBE_RESP={0x46a, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x299, 0x91, "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"}, @NL80211_ATTR_IE={0x12a, 0x2a, [@perr={0x84, 0xef, {0x1f, 0xf, [@ext={{}, @device_b, 0x401, @device_b, 0x3b}, @not_ext={{}, @device_b, 0x2, "", 0x25}, @not_ext={{}, @device_b, 0x0, "", 0x11}, @ext={{}, @device_a, 0x1ff, @broadcast, 0x3b}, @not_ext={{}, @device_a, 0x8, "", 0x24}, @not_ext={{}, @broadcast, 0x5, "", 0x7}, @not_ext={{}, @broadcast, 0x9, "", 0x2c}, @ext={{}, @device_a, 0xffff, @broadcast, 0x1}, @not_ext={{}, @broadcast, 0x0, "", 0x14}, @ext={{}, @device_b, 0x6, @broadcast, 0x15}, @ext={{}, @device_a, 0x2, @device_b, 0x14}, @ext={{}, @device_a, 0x7, @broadcast, 0x12}, @not_ext={{}, @device_b, 0x1, "", 0x31}, @not_ext={{}, @device_b, 0x854, "", 0xa}, @ext={{}, @broadcast, 0x1, @device_a, 0x2b}]}}, @mesh_chsw={0x76, 0x6, {0x2, 0x4, 0x2f, 0x2}}, @chsw_timing={0x68, 0x4, {0x6, 0x5}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @challenge={0x10, 0x1, 0xbd}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_FTM_RESPONDER={0xdc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc8, 0x2, "3e785793fe83b1a77f5a777c2b4b88330c9c1b5d9b9ab190fb67a86de4ab062b53b571b52e47ad41c38f316b2711edec78f1453da8efdecf7c99606d354372f738d8a05f774635da70f1078b667d8596eb769ec1079a390a1171234d1d0ddf9aaf9b44770b4b5c2319264fe62fbfc6764c1f9a90051b016e48c21a2bfbdae8d15524618015f9d633c494afd5ebf348fe37698731dc4d504e6ebe8fcb4ba3f20ed4d2a6c3e39c1b71118c3e72a2b071afd44c5f6dfed5946cf958231ccb1ee673dfe3bb9c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE={0xc7, 0x2a, [@perr={0x84, 0x88, {0x42, 0x8, [@ext={{}, @device_a, 0x0, @broadcast, 0x3}, @not_ext={{}, @broadcast, 0x9, "", 0x10}, @not_ext={{}, @device_a, 0xf800000, "", 0x1f}, @not_ext={{}, @device_a, 0x4, "", 0x7}, @ext={{}, @device_a, 0x6, @device_a, 0x11}, @ext={{}, @device_a, 0x7, @device_b, 0x3}, @ext={{}, @device_b, 0xe3ed, @device_a, 0x1c}, @ext={{}, @device_a, 0x0, @broadcast, 0x40}]}}, @measure_req={0x26, 0x37, {0x4, 0x1, 0x81, "8d282035742c49888a4066f9a989262194ea3bfd6ad0c8662e82e3948d1a57cfa8f9275da1fb3f66b5de020f3f5ca7a1e62435e7"}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x1, 0xd5, 0x1, 0x9, 0x800]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1d4, 0x7f, [@channel_switch={0x25, 0x3, {0x0, 0xae, 0x2b}}, @cf={0x4, 0x6, {0x7, 0x4, 0xfff8, 0x7fff}}, @random_vendor={0xdd, 0x2b, "32306ef8c85345ce9d6ed9c42069a4fe11c3f2b123b57a8402c4d97d8bbf48ce03653d9944707da675e64c"}, @random={0x5, 0x75, "99f7b1a794764c0b23f752679c34952bcd1ac9d14f581cff9fed05566aeca2f821b9e1ab4080cd9936bea40f217e777981941371a8edb8b5f8408c9821259ac9cec06c8f9e444705d57bf4473beddaa3bbad021955dca67130149fb4390e21ec1e8fc5322f44c82522878fc92dadf5a3a969c5a5c8"}, @gcr_ga={0xbd, 0x6}, @random_vendor={0xdd, 0xf6, "0f77adf38d72de28bc793b1950cdcaee03321581cffb5086ca73666f30774f738327781cea91bc9888e76d31dc52d5e67943fb0f42ed7f47b5bdd56b0c53dccb0ceaa5b6201b6196568f95ae5011fc6b071d07741608a476c9464aa62b03c9944d3f0de205ba5836511b62096831e83c35c2e485a2d66cc0c0bea0221d929012b424e40ac30ba9c6756bfe4fcdb6548ae5edd1001a2ce0281582fe83b0d4c7340850885856ef4f987f343c498ebe978dbd95213163f2e078a2c016cdb0b29ce7b077bf49b8ebc06c27cfb8057a15e58e21a2b027ada5cb7c82cdb4b7ed0d715845819fe348ee9f2ded05867118408bb00a053d472ddd"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x5, 0x0, {0x8, 0x9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x4, 0x4}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x15, 0x7f, [@dsss={0x3, 0x1, 0xb7}, @chsw_timing={0x68, 0x4, {0x2, 0x7}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x8c, 0x7f, [@ssid={0x0, 0x6, @default_ibss_ssid}, @random_vendor={0xdd, 0x4a, "f720a0ee3c678025c7cc80155d9aa6b9573246f3de80040d3e23a114aef2c422af524f73afada36a7630c0f7065e4f14b2876f6c0d96e52985eb0bd54d51bc6d73cf9f4a2f08fecd128b"}, @measure_req={0x26, 0x18, {0x72, 0x1f, 0x9, "0eae273b8ccf5914e387a75afda484ef4a3c71e4b6"}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @perr={0x84, 0x15, {0x3f, 0x1, [@ext={{}, @broadcast, 0x40, @broadcast, 0x10}]}}]}, @NL80211_ATTR_IE={0x4}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x1f, 0x800]}]}, @NL80211_ATTR_CSA_IES={0x2c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x6, 0x6, 0x2, 0x40, 0xf4, 0x7fff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x4, 0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x1000, 0xea, 0x2, 0xfff, 0x0, 0x8]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x58}]]}, 0xdb0}, 0x1, 0x0, 0x0, 0x20000015}, 0x20040884)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r5, 0x0, 0x10000a006)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002140)={&(0x7f0000001840)={0x8c8, 0x0, 0x304, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe05}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa395}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x103c}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xda}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb7ca}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x80, 0x8, 0x5, 0x10001}, {0x0, 0x0, 0x64, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf7}}}]}}]}, 0x8c8}, 0x1, 0x0, 0x0, 0x41}, 0x40080)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r11, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8a6c}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4840)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x64, 0x28, 0xf39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0)

21:02:44 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700006000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:44 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xfc030000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xc801], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  667.402387][   T27] audit: type=1804 audit(1668891764.176:708): pid=24464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/969/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0
[  667.492952][T24480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
21:02:44 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xffffe000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  667.523458][   T27] audit: type=1804 audit(1668891764.216:709): pid=24464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/969/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0
21:02:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xd003], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:44 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700006800000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:44 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x4000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:44 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xe803], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  667.646406][   T27] audit: type=1804 audit(1668891764.216:710): pid=24464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/969/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0
21:02:44 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xe0ffff00000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:44 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700006c00000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  667.803319][T24480] HTB: quantum of class FFFFFFFF is small. Consider r2q change.
[  667.827589][   T27] audit: type=1804 audit(1668891764.216:711): pid=24464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/969/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0
21:02:45 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x64, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f01131dcfe800c6bfb8f83155b140af6f9b5cd261aa1a186597e7eca8769adf7975e25100c0425bfdf4a623b2dff7a5f57231ee0193f0757aa99bb1646e9e65b80d95aa646189bf0665f18ed9a74468a557a1632cee801f9a6a26cd41950f603f5c2c173c671c1ed2dab06726805048faf0d4b5be3d0c0ff293addc3b5db3da463d9d54cd9344866a456b74c452d5c7a29a1a8d788e46c2f35d697e4894b2694aa24eb78cd8657a1c6b86a4c80d72405fb1d875385f51d3fbe5624c615a414efda4975bbba22c038e2826d725b28fc1ab4872bbf0fbc253954d36f2621b385f834a57d99724bd02e1d189ab591ba6f3b2ae63ffdc31bd15907b43eed94", @ANYRES16=r2, @ANYBLOB="080025bd7000fcdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000800))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0xa)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4d0a3ff2", @ANYRES16=r10, @ANYBLOB="00082cbd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000007c0))
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r11, r6, 0x0, 0x10000a006)

21:02:45 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c) (async)
bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe) (async)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64)
r2 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={<r3=>0x0}, &(0x7f0000000440)=0xffffffffffffff3f)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @empty}}, 0xff80, 0x10}, 0x90) (async, rerun: 64)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r3, 0x80000003}, 0xc) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={<r4=>r3, @in={{0x2, 0x4e1f, @remote}}, 0x1000004, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x5}, &(0x7f0000000280)=0x9c)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000480), &(0x7f0000000900)=0x4) (async, rerun: 64)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000005c0)=ANY=[@ANYRES32=<r5=>r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) (rerun: 32)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c) (async)
close(r0)

21:02:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xf400], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:45 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700047300000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x100000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:45 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f11002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async)
r0 = socket(0x10, 0x8000000000000003, 0x0) (async, rerun: 32)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket(0x10, 0x2, 0x0) (rerun: 32)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0) (async, rerun: 32)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (rerun: 32)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r4, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0}) (rerun: 64)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x6f496b1860f0031e}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)={0xdb0, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xbd, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x178}], @NL80211_ATTR_CSA_IES={0xce8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xfff8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x3, 0xb08, 0x1572, 0x4, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1000, 0x1, 0x7fff]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4e, 0x80, [@tim={0x5, 0x15, {0x4, 0x8f, 0x2, "c015867df3e7a647ef328321f59a5c64062d"}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mic={0x8c, 0x18, {0xab1, "cb2a7ad83e01", @long="a45f08a08e9d163a6581ca87e06a3121"}}, @peer_mgmt={0x75, 0x4, {0x0, 0x1, @void, @void, @void}}, @channel_switch={0x25, 0x3, {0x0, 0x5, 0x7}}]}, @NL80211_ATTR_PROBE_RESP={0x46a, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x299, 0x91, "891a7fc592478be55802ea5702ae2b87a4405eedc269b2b7594acc0ac9d95414833f4600398458ded3af2ce10479501abb8734ebe36c35fb8d900d50a04c3b2ec503ac0370927e8445e0337e0355eb607982aae79f3e1ddf6bf247aa81f7af68b89739b6dc344c4a6bbd8998cee20a1984334f9faadb8e2cca9692c3ceea90ae0b79e9e6ba073ef52bccf05589a1809dc9b0a46922847b3a9830037b7416d09d20de60dc4d7e7926dd830e4e0a04a42cfcf69889c869cb26a4cf1c4923a61aec9f4105037fa2a8ffd57c65ba659958a3e26e0b15bd3af6d54116eea9486a8b4427ee3fa66ce09756adb7cad3b8f689505c5b918c15ba28de7a4b2cf2b101f774122cc2a67bef415445731b5b2464790d89ff9001c4b3b1410f7bd36910f87311295493a293197eaf96d0506eb9c038d93f54aaf3b8e4b271e982d9638410068c2c387486cb794fe129b0658d5bdb19b5f1c61d04044a38a96b7bf03c3f9689ff060ee76885bec23873e5234b2b2f648228039d8d77e7ada71740ce2519b6abd24747e2134b64fed50c8ff289dcaf7d7633ccf00d391e35e0e18c31dff8f43f6c98108fcf18dd7df5e8614a7350c039b3e6c28c71013c4807dbee11a894637363f4a8f0a94e6d25d25bdcade480513333253dc35d92ba4368d81f66ca19f47875fd332d453c1eca14bb9ff2c16a689487725f1d275ccdaf04a98ac7cb6ad693f25e8740b79858f07406c0f1a438840e723c2bccb429321c8ff379c2fc11f999fef2252f465093391da0d17fbfb4bfc512328dca8b666e114384ed6c4f6d217188195ba74e3a4d8957dfaab5e2de4ef97010602f417f06ae88775e2da5790e24a3cf718caf4c8f2f91ab55d2f2eb6b1e2d4065fcaad237751c8340f0ec248044e7c26e03d612cfc581574422d29e6ad166597c32c57f"}, @NL80211_ATTR_IE={0x12a, 0x2a, [@perr={0x84, 0xef, {0x1f, 0xf, [@ext={{}, @device_b, 0x401, @device_b, 0x3b}, @not_ext={{}, @device_b, 0x2, "", 0x25}, @not_ext={{}, @device_b, 0x0, "", 0x11}, @ext={{}, @device_a, 0x1ff, @broadcast, 0x3b}, @not_ext={{}, @device_a, 0x8, "", 0x24}, @not_ext={{}, @broadcast, 0x5, "", 0x7}, @not_ext={{}, @broadcast, 0x9, "", 0x2c}, @ext={{}, @device_a, 0xffff, @broadcast, 0x1}, @not_ext={{}, @broadcast, 0x0, "", 0x14}, @ext={{}, @device_b, 0x6, @broadcast, 0x15}, @ext={{}, @device_a, 0x2, @device_b, 0x14}, @ext={{}, @device_a, 0x7, @broadcast, 0x12}, @not_ext={{}, @device_b, 0x1, "", 0x31}, @not_ext={{}, @device_b, 0x854, "", 0xa}, @ext={{}, @broadcast, 0x1, @device_a, 0x2b}]}}, @mesh_chsw={0x76, 0x6, {0x2, 0x4, 0x2f, 0x2}}, @chsw_timing={0x68, 0x4, {0x6, 0x5}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @challenge={0x10, 0x1, 0xbd}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_FTM_RESPONDER={0xdc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc8, 0x2, "3e785793fe83b1a77f5a777c2b4b88330c9c1b5d9b9ab190fb67a86de4ab062b53b571b52e47ad41c38f316b2711edec78f1453da8efdecf7c99606d354372f738d8a05f774635da70f1078b667d8596eb769ec1079a390a1171234d1d0ddf9aaf9b44770b4b5c2319264fe62fbfc6764c1f9a90051b016e48c21a2bfbdae8d15524618015f9d633c494afd5ebf348fe37698731dc4d504e6ebe8fcb4ba3f20ed4d2a6c3e39c1b71118c3e72a2b071afd44c5f6dfed5946cf958231ccb1ee673dfe3bb9c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE={0xc7, 0x2a, [@perr={0x84, 0x88, {0x42, 0x8, [@ext={{}, @device_a, 0x0, @broadcast, 0x3}, @not_ext={{}, @broadcast, 0x9, "", 0x10}, @not_ext={{}, @device_a, 0xf800000, "", 0x1f}, @not_ext={{}, @device_a, 0x4, "", 0x7}, @ext={{}, @device_a, 0x6, @device_a, 0x11}, @ext={{}, @device_a, 0x7, @device_b, 0x3}, @ext={{}, @device_b, 0xe3ed, @device_a, 0x1c}, @ext={{}, @device_a, 0x0, @broadcast, 0x40}]}}, @measure_req={0x26, 0x37, {0x4, 0x1, 0x81, "8d282035742c49888a4066f9a989262194ea3bfd6ad0c8662e82e3948d1a57cfa8f9275da1fb3f66b5de020f3f5ca7a1e62435e7"}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x1, 0xd5, 0x1, 0x9, 0x800]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1d4, 0x7f, [@channel_switch={0x25, 0x3, {0x0, 0xae, 0x2b}}, @cf={0x4, 0x6, {0x7, 0x4, 0xfff8, 0x7fff}}, @random_vendor={0xdd, 0x2b, "32306ef8c85345ce9d6ed9c42069a4fe11c3f2b123b57a8402c4d97d8bbf48ce03653d9944707da675e64c"}, @random={0x5, 0x75, "99f7b1a794764c0b23f752679c34952bcd1ac9d14f581cff9fed05566aeca2f821b9e1ab4080cd9936bea40f217e777981941371a8edb8b5f8408c9821259ac9cec06c8f9e444705d57bf4473beddaa3bbad021955dca67130149fb4390e21ec1e8fc5322f44c82522878fc92dadf5a3a969c5a5c8"}, @gcr_ga={0xbd, 0x6}, @random_vendor={0xdd, 0xf6, "0f77adf38d72de28bc793b1950cdcaee03321581cffb5086ca73666f30774f738327781cea91bc9888e76d31dc52d5e67943fb0f42ed7f47b5bdd56b0c53dccb0ceaa5b6201b6196568f95ae5011fc6b071d07741608a476c9464aa62b03c9944d3f0de205ba5836511b62096831e83c35c2e485a2d66cc0c0bea0221d929012b424e40ac30ba9c6756bfe4fcdb6548ae5edd1001a2ce0281582fe83b0d4c7340850885856ef4f987f343c498ebe978dbd95213163f2e078a2c016cdb0b29ce7b077bf49b8ebc06c27cfb8057a15e58e21a2b027ada5cb7c82cdb4b7ed0d715845819fe348ee9f2ded05867118408bb00a053d472ddd"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x5, 0x0, {0x8, 0x9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x4, 0x4}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x15, 0x7f, [@dsss={0x3, 0x1, 0xb7}, @chsw_timing={0x68, 0x4, {0x2, 0x7}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x8c, 0x7f, [@ssid={0x0, 0x6, @default_ibss_ssid}, @random_vendor={0xdd, 0x4a, "f720a0ee3c678025c7cc80155d9aa6b9573246f3de80040d3e23a114aef2c422af524f73afada36a7630c0f7065e4f14b2876f6c0d96e52985eb0bd54d51bc6d73cf9f4a2f08fecd128b"}, @measure_req={0x26, 0x18, {0x72, 0x1f, 0x9, "0eae273b8ccf5914e387a75afda484ef4a3c71e4b6"}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @perr={0x84, 0x15, {0x3f, 0x1, [@ext={{}, @broadcast, 0x40, @broadcast, 0x10}]}}]}, @NL80211_ATTR_IE={0x4}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x1f, 0x800]}]}, @NL80211_ATTR_CSA_IES={0x2c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x6, 0x6, 0x2, 0x40, 0xf4, 0x7fff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x4, 0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x1000, 0xea, 0x2, 0xfff, 0x0, 0x8]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x58}]]}, 0xdb0}, 0x1, 0x0, 0x0, 0x20000015}, 0x20040884) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendfile(r7, r5, 0x0, 0x10000a006) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) (async)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async, rerun: 64)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0}) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) (async, rerun: 64)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002140)={&(0x7f0000001840)={0x8c8, 0x0, 0x304, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe05}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa395}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x103c}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xda}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb7ca}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x80, 0x8, 0x5, 0x10001}, {0x0, 0x0, 0x64, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf7}}}]}}]}, 0x8c8}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async, rerun: 64)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}]}, 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r11, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8a6c}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4840)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x64, 0x28, 0xf39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0)

21:02:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x200000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xf903], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:45 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700007400000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xfe03], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  668.571310][T24528] recent_mt_check: 12 callbacks suppressed
[  668.571328][T24528] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:45 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f11002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
r0 = socket(0x10, 0x8000000000000003, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x2, 0x0)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000024000705fcffffffffffffff00001f00", @ANYRES32=r4, @ANYBLOB="000004f8f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x6f496b1860f0031e}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)={0xdb0, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xbd, 0x7f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x178}], @NL80211_ATTR_CSA_IES={0xce8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0xfff8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x3, 0xb08, 0x1572, 0x4, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x1000, 0x1, 0x7fff]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4e, 0x80, [@tim={0x5, 0x15, {0x4, 0x8f, 0x2, "c015867df3e7a647ef328321f59a5c64062d"}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @mic={0x8c, 0x18, {0xab1, "cb2a7ad83e01", @long="a45f08a08e9d163a6581ca87e06a3121"}}, @peer_mgmt={0x75, 0x4, {0x0, 0x1, @void, @void, @void}}, @channel_switch={0x25, 0x3, {0x0, 0x5, 0x7}}]}, @NL80211_ATTR_PROBE_RESP={0x46a, 0x91, "cbc4447532d6cdc153c52060342369b7e026676343a5896d64e585c769ee5fa9c4cfa8434562c5964909c1975024ce1e1d903c7c93085f97728868e39f4895c518bd728e34a707fe9b3c7b670136a14a2597c53ecd4f5a287be349dbf5f10fbbae65dd097024614f1916917f75c1c37cc621f801fc14179c294263005e13a19bf1991ed547d93556a7e8506162749d8275e3803145524615401b03f8002c2ff01c987e40dd486cda316b7cf81737834be6f64e0c409fbe70e39b1f4bbb20b231bad6c539a97a2c1f6ff87b97041f7aac3f278c4dfa69e946a1d6681e5e8ab2c3bafe270277fe823753d5d79518ae6cdf8c2c4ab7613822ecb78b5280f6775776cefd30bee038ffc51fd2c1a3f4ccccafb8cf0efd5d70ad6e08b86aa045e5f9a3b45163adda55347233e0c6faa881046fad393bb709577d59b7cb9a8eef6f8c054316730a2b80f331d858d798cb60caeb5b4be09757af24d3c00753b7b3ded3caaccbdf81d133cbef0278ded55f6cb0b84b6c8566c2774653c959d234b15f431f0bbb1aa55bf19a8fa2bc9dd878257a8ba4d515add20976e0a23142d8dcabbc99dedfc8736ae59ad7271e0d1bffa4de2580d9d39b811e6ade71feb8135515ff1cf0ddb310310b058423155a8f2d10f78b5bb83ecdd06402a797e21bcbf6d7d93bc2c5a48034a0b0d87824f85db9baefb9f1813998ddfa7553b585e04427dddc472378e0a85a9f56ea075b696ca80ebca0bcc477ef8a0bb2d70321f2a56bf5702cb7585dab1398d52f398f98d5d267166b86b6333097d45a545f0cf3decf32f1bf062834a989416a492d8a4455224d321d2742f96e2b21163d471c9e6648f6dc96afa0c1136d24717899e16887da1c96b4f1132f23265aa12fd4873f48c3bf157587f4b0cbc9870e905c8bf123597f7e60b04838aeaeba890c170a9f3d210eeb934917634954da08121c1d98440f7df6e131a31e96c2c50e16bb71fa020d0f5f8d8b5de343bfe26e83f4027d2ed51992c63de9dfaf2549a82ec78616b9a2ceace925798e85a706bbaa90e7437e4094594f1e42f6e9d27bb5f1f47b1df88ae8aa0b5170c216e149d5a7bf317df77bab28c23e7285214819103a8526a6258d5a40767681fe2069b62a22d07fb8f6c5e5a1b05344a55714fdde7606a1aef65f852ad16aadb8aa2e190bae2936a20c8d3b117dec51df95e2ac2d22d57f0b3bcd79c3011a5800daa62ae6361009c0923314a69465be9e1e831b937a300481ad6dd3bf4a0654c00a785bcdd4109b81e8c9c72ec2afc3abb92347e0c55bf719e192e584c1762453632ea2ec6164efa26a9decfa46de2aafbbf979adc8196fd44c22e348a2ad1125efca8eb4108e9a46596fbec8abf910c4a5bb063538ddc7372e8d18389d81588f3aa1c0d84aea645f8ede1d5a51be3a26608f1de65edbd2c0202afc2e382fe7b661cf6d53dd1001971d9c680d2be5250b43354b2746a57745d30d7bc719a0f282b62d4d9e334fe0b5d43585e59b2fb54fce856c5ec104ec4aafcd9f216375f7c4daf7c5d5579bfeff68b14f3f1c52a44695a5a46dc033097bc9e9698334f6cdf93a3539"}, @NL80211_ATTR_PROBE_RESP={0x299, 0x91, "891a7fc592478be55802ea5702ae2b87a4405eedc269b2b7594acc0ac9d95414833f4600398458ded3af2ce10479501abb8734ebe36c35fb8d900d50a04c3b2ec503ac0370927e8445e0337e0355eb607982aae79f3e1ddf6bf247aa81f7af68b89739b6dc344c4a6bbd8998cee20a1984334f9faadb8e2cca9692c3ceea90ae0b79e9e6ba073ef52bccf05589a1809dc9b0a46922847b3a9830037b7416d09d20de60dc4d7e7926dd830e4e0a04a42cfcf69889c869cb26a4cf1c4923a61aec9f4105037fa2a8ffd57c65ba659958a3e26e0b15bd3af6d54116eea9486a8b4427ee3fa66ce09756adb7cad3b8f689505c5b918c15ba28de7a4b2cf2b101f774122cc2a67bef415445731b5b2464790d89ff9001c4b3b1410f7bd36910f87311295493a293197eaf96d0506eb9c038d93f54aaf3b8e4b271e982d9638410068c2c387486cb794fe129b0658d5bdb19b5f1c61d04044a38a96b7bf03c3f9689ff060ee76885bec23873e5234b2b2f648228039d8d77e7ada71740ce2519b6abd24747e2134b64fed50c8ff289dcaf7d7633ccf00d391e35e0e18c31dff8f43f6c98108fcf18dd7df5e8614a7350c039b3e6c28c71013c4807dbee11a894637363f4a8f0a94e6d25d25bdcade480513333253dc35d92ba4368d81f66ca19f47875fd332d453c1eca14bb9ff2c16a689487725f1d275ccdaf04a98ac7cb6ad693f25e8740b79858f07406c0f1a438840e723c2bccb429321c8ff379c2fc11f999fef2252f465093391da0d17fbfb4bfc512328dca8b666e114384ed6c4f6d217188195ba74e3a4d8957dfaab5e2de4ef97010602f417f06ae88775e2da5790e24a3cf718caf4c8f2f91ab55d2f2eb6b1e2d4065fcaad237751c8340f0ec248044e7c26e03d612cfc581574422d29e6ad166597c32c57f"}, @NL80211_ATTR_IE={0x12a, 0x2a, [@perr={0x84, 0xef, {0x1f, 0xf, [@ext={{}, @device_b, 0x401, @device_b, 0x3b}, @not_ext={{}, @device_b, 0x2, "", 0x25}, @not_ext={{}, @device_b, 0x0, "", 0x11}, @ext={{}, @device_a, 0x1ff, @broadcast, 0x3b}, @not_ext={{}, @device_a, 0x8, "", 0x24}, @not_ext={{}, @broadcast, 0x5, "", 0x7}, @not_ext={{}, @broadcast, 0x9, "", 0x2c}, @ext={{}, @device_a, 0xffff, @broadcast, 0x1}, @not_ext={{}, @broadcast, 0x0, "", 0x14}, @ext={{}, @device_b, 0x6, @broadcast, 0x15}, @ext={{}, @device_a, 0x2, @device_b, 0x14}, @ext={{}, @device_a, 0x7, @broadcast, 0x12}, @not_ext={{}, @device_b, 0x1, "", 0x31}, @not_ext={{}, @device_b, 0x854, "", 0xa}, @ext={{}, @broadcast, 0x1, @device_a, 0x2b}]}}, @mesh_chsw={0x76, 0x6, {0x2, 0x4, 0x2f, 0x2}}, @chsw_timing={0x68, 0x4, {0x6, 0x5}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @challenge={0x10, 0x1, 0xbd}, @gcr_ga={0xbd, 0x6, @broadcast}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_TAIL={0x4}, @NL80211_ATTR_FTM_RESPONDER={0xdc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc8, 0x2, "3e785793fe83b1a77f5a777c2b4b88330c9c1b5d9b9ab190fb67a86de4ab062b53b571b52e47ad41c38f316b2711edec78f1453da8efdecf7c99606d354372f738d8a05f774635da70f1078b667d8596eb769ec1079a390a1171234d1d0ddf9aaf9b44770b4b5c2319264fe62fbfc6764c1f9a90051b016e48c21a2bfbdae8d15524618015f9d633c494afd5ebf348fe37698731dc4d504e6ebe8fcb4ba3f20ed4d2a6c3e39c1b71118c3e72a2b071afd44c5f6dfed5946cf958231ccb1ee673dfe3bb9c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x4}]}, @NL80211_ATTR_IE={0xc7, 0x2a, [@perr={0x84, 0x88, {0x42, 0x8, [@ext={{}, @device_a, 0x0, @broadcast, 0x3}, @not_ext={{}, @broadcast, 0x9, "", 0x10}, @not_ext={{}, @device_a, 0xf800000, "", 0x1f}, @not_ext={{}, @device_a, 0x4, "", 0x7}, @ext={{}, @device_a, 0x6, @device_a, 0x11}, @ext={{}, @device_a, 0x7, @device_b, 0x3}, @ext={{}, @device_b, 0xe3ed, @device_a, 0x1c}, @ext={{}, @device_a, 0x0, @broadcast, 0x40}]}}, @measure_req={0x26, 0x37, {0x4, 0x1, 0x81, "8d282035742c49888a4066f9a989262194ea3bfd6ad0c8662e82e3948d1a57cfa8f9275da1fb3f66b5de020f3f5ca7a1e62435e7"}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x1, 0xd5, 0x1, 0x9, 0x800]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1d4, 0x7f, [@channel_switch={0x25, 0x3, {0x0, 0xae, 0x2b}}, @cf={0x4, 0x6, {0x7, 0x4, 0xfff8, 0x7fff}}, @random_vendor={0xdd, 0x2b, "32306ef8c85345ce9d6ed9c42069a4fe11c3f2b123b57a8402c4d97d8bbf48ce03653d9944707da675e64c"}, @random={0x5, 0x75, "99f7b1a794764c0b23f752679c34952bcd1ac9d14f581cff9fed05566aeca2f821b9e1ab4080cd9936bea40f217e777981941371a8edb8b5f8408c9821259ac9cec06c8f9e444705d57bf4473beddaa3bbad021955dca67130149fb4390e21ec1e8fc5322f44c82522878fc92dadf5a3a969c5a5c8"}, @gcr_ga={0xbd, 0x6}, @random_vendor={0xdd, 0xf6, "0f77adf38d72de28bc793b1950cdcaee03321581cffb5086ca73666f30774f738327781cea91bc9888e76d31dc52d5e67943fb0f42ed7f47b5bdd56b0c53dccb0ceaa5b6201b6196568f95ae5011fc6b071d07741608a476c9464aa62b03c9944d3f0de205ba5836511b62096831e83c35c2e485a2d66cc0c0bea0221d929012b424e40ac30ba9c6756bfe4fcdb6548ae5edd1001a2ce0281582fe83b0d4c7340850885856ef4f987f343c498ebe978dbd95213163f2e078a2c016cdb0b29ce7b077bf49b8ebc06c27cfb8057a15e58e21a2b027ada5cb7c82cdb4b7ed0d715845819fe348ee9f2ded05867118408bb00a053d472ddd"}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @ht={0x2d, 0x1a, {0x1000, 0x0, 0x5, 0x0, {0x8, 0x9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x4, 0x4}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x15, 0x7f, [@dsss={0x3, 0x1, 0xb7}, @chsw_timing={0x68, 0x4, {0x2, 0x7}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_PROBE_RESP={0x8c, 0x7f, [@ssid={0x0, 0x6, @default_ibss_ssid}, @random_vendor={0xdd, 0x4a, "f720a0ee3c678025c7cc80155d9aa6b9573246f3de80040d3e23a114aef2c422af524f73afada36a7630c0f7065e4f14b2876f6c0d96e52985eb0bd54d51bc6d73cf9f4a2f08fecd128b"}, @measure_req={0x26, 0x18, {0x72, 0x1f, 0x9, "0eae273b8ccf5914e387a75afda484ef4a3c71e4b6"}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @perr={0x84, 0x15, {0x3f, 0x1, [@ext={{}, @broadcast, 0x40, @broadcast, 0x10}]}}]}, @NL80211_ATTR_IE={0x4}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x1f, 0x800]}]}, @NL80211_ATTR_CSA_IES={0x2c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x6, 0x6, 0x2, 0x40, 0xf4, 0x7fff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x4, 0x3]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x1000, 0xea, 0x2, 0xfff, 0x0, 0x8]}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x58}]]}, 0xdb0}, 0x1, 0x0, 0x0, 0x20000015}, 0x20040884)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r7, r5, 0x0, 0x10000a006) (async, rerun: 32)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async, rerun: 32)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100), 0x10) (async)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async, rerun: 64)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async, rerun: 64)
bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) (async)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002140)={&(0x7f0000001840)={0x8c8, 0x0, 0x304, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe05}}, {0x8}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa395}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x103c}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xda}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb7ca}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x80, 0x8, 0x5, 0x10001}, {0x0, 0x0, 0x64, 0x400}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf7}}}]}}]}, 0x8c8}, 0x1, 0x0, 0x0, 0x41}, 0x40080) (async)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r11, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8a6c}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x4840) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x64, 0x28, 0xf39, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}, {0x0, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0)

21:02:45 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700007a00000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  668.759599][T24536] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
21:02:45 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x64, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="080025bd7000fcdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000800))
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
socket$netlink(0x10, 0x3, 0xa) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0}) (async)
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4d0a3ff2", @ANYRES16=r10, @ANYBLOB="00082cbd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000007c0)) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r11, r6, 0x0, 0x10000a006)

21:02:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x300000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:45 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070000f000000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xff00], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:45 executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x900, 0x2c1, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0xfa, 0x1, 0x2, 0x80, 0x47, 0x6, 0x79, 0xd7, 0x81, 0x5, 0x1, 0x35, 0x3}, 0xe)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={<r3=>0x0}, &(0x7f0000000440)=0xffffffffffffff3f)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x1, @empty}}, 0xff80, 0x10}, 0x90) (async)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000400)=@sack_info={r3, 0x80000003}, 0xc) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={<r4=>r3, @in={{0x2, 0x4e1f, @remote}}, 0x1000004, 0x59dd, 0x2, 0x1, 0xc, 0xff6, 0x5}, &(0x7f0000000280)=0x9c)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000480), &(0x7f0000000900)=0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xfffffffffffffeee) (async)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000005c0)=ANY=[@ANYRES32=<r5=>r4, @ANYBLOB="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"], &(0x7f00000004c0)=0xbc) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x7fff, 0x20, 0x8209, 0x4, 0x5, 0x7f8, 0x20, 0xffff, r5}, &(0x7f0000000540)=0x20) (async)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f00000000c0)=0x8, 0x4)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="d9b331b29c01c3ae75c61ec4", 0xc, 0x40000c0, &(0x7f0000000080)={0xa, 0x4e24, 0x3, @remote, 0x1ff}, 0x1c)
close(r0)

21:02:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xff03], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:45 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700004003000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  668.856235][T24543] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:45 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700006800000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x400000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3ffff], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:45 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000340000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  669.045322][   T27] kauditd_printk_skb: 12 callbacks suppressed
[  669.045341][   T27] audit: type=1804 audit(1668891765.826:724): pid=24550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/971/cgroup.controllers" dev="sda1" ino=1160 res=1 errno=0
[  669.087286][T24566] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:45 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x64, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f01131dcfe800c6bfb8f83155b140af6f9b5cd261aa1a186597e7eca8769adf7975e25100c0425bfdf4a623b2dff7a5f57231ee0193f0757aa99bb1646e9e65b80d95aa646189bf0665f18ed9a74468a557a1632cee801f9a6a26cd41950f603f5c2c173c671c1ed2dab06726805048faf0d4b5be3d0c0ff293addc3b5db3da463d9d54cd9344866a456b74c452d5c7a29a1a8d788e46c2f35d697e4894b2694aa24eb78cd8657a1c6b86a4c80d72405fb1d875385f51d3fbe5624c615a414efda4975bbba22c038e2826d725b28fc1ab4872bbf0fbc253954d36f2621b385f834a57d99724bd02e1d189ab591ba6f3b2ae63ffdc31bd15907b43eed94", @ANYRES16=r2, @ANYBLOB="080025bd7000fcdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000800)) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0xa)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r9=>0x0}) (async)
r10 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4d0a3ff2", @ANYRES16=r10, @ANYBLOB="00082cbd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f00000007c0)) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r11, r6, 0x0, 0x10000a006)

21:02:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x500000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:45 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700fffff0000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:45 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x5)
accept4(r0, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80, 0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r3, r2, 0x0, 0x10000a006)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2321202e2f66696c6530207d5c206d656d6f72792e6576656e747300206d656d6f72792e6576656e747300200a05c011109686599a05f2b8585fe1cec47e11ed8bbf74f6e11ef18eebfda490095d9c5ee4719dac02a0206e435550e80f1f6c8ca7784fa0dec1c509252d2a27bdbadd6bfcbb3ab224adb55204b085a31bb580debaf2cedd16e6966a2bc7fec988f4aac487118c86cb4b615d57659a4793ac6877ce97dcc36ec1cd8de2495306ef38311ad12dd127fc9a0c3e1a5975190f1cb1db485d00d7a52ac3d141fcb9d542ff796cadd9702a29de3129be9b73a98d3c59e5ede42fc323fee7386b15778895dc4106f6652ab747ec243de4db176c530247c1e5b414b3174ab436913236e5643775297f9fae51d7305c34b939679290b3867ca837b38f3be654a12274afa2f3b61d45df0d42e2ede84b52d81146bd9f13879827c9c9ec616e69356cd34d371d875c439747cfa11275065d7dfaccd9"], 0x129)
bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x2, 0x2}, 0x6)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x5, 0x12)
write$binfmt_script(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c6530206d656d6f72792e737761702e63757272656e740020a72d2a402829206d656d6f72792e6576656e747300206d656d6f72792e6576656e747300206d656d6f72792e737761702e63757272656e740020206d656d6f72792e737761702e63757272656e740020da44bc1ba99018ea09ebfde7426128227c250a4207e40758d9225e57a5a4db1e3d41a3054fb4febb72429064baf66f8d4c8c5042004d99fc1d50359ee69f2edae388f7a0ee2c6a4f349cc8fd04cc16e9046a2bb3ac999c8639eb"], 0x9e)
socket$pppl2tp(0x18, 0x1, 0x1)
sendfile(r5, r6, 0x0, 0xf03b0000)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10, 0xffffffffffffffff, 0x0)

21:02:45 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x40000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:46 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x5)
accept4(r0, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80, 0x800) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r3, r2, 0x0, 0x10000a006) (async, rerun: 64)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 64)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2321202e2f66696c6530207d5c206d656d6f72792e6576656e747300206d656d6f72792e6576656e747300200a05c011109686599a05f2b8585fe1cec47e11ed8bbf74f6e11ef18eebfda490095d9c5ee4719dac02a0206e435550e80f1f6c8ca7784fa0dec1c509252d2a27bdbadd6bfcbb3ab224adb55204b085a31bb580debaf2cedd16e6966a2bc7fec988f4aac487118c86cb4b615d57659a4793ac6877ce97dcc36ec1cd8de2495306ef38311ad12dd127fc9a0c3e1a5975190f1cb1db485d00d7a52ac3d141fcb9d542ff796cadd9702a29de3129be9b73a98d3c59e5ede42fc323fee7386b15778895dc4106f6652ab747ec243de4db176c530247c1e5b414b3174ab436913236e5643775297f9fae51d7305c34b939679290b3867ca837b38f3be654a12274afa2f3b61d45df0d42e2ede84b52d81146bd9f13879827c9c9ec616e69356cd34d371d875c439747cfa11275065d7dfaccd9"], 0x129) (async)
bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x2, 0x2}, 0x6)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x5, 0x12)
write$binfmt_script(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c6530206d656d6f72792e737761702e63757272656e740020a72d2a402829206d656d6f72792e6576656e747300206d656d6f72792e6576656e747300206d656d6f72792e737761702e63757272656e740020206d656d6f72792e737761702e63757272656e740020da44bc1ba99018ea09ebfde7426128227c250a4207e40758d9225e57a5a4db1e3d41a3054fb4febb72429064baf66f8d4c8c5042004d99fc1d50359ee69f2edae388f7a0ee2c6a4f349cc8fd04cc16e9046a2bb3ac999c8639eb"], 0x9e) (async, rerun: 64)
socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64)
sendfile(r5, r6, 0x0, 0xf03b0000)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10, 0xffffffffffffffff, 0x0)

[  669.293806][T24581] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x1000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r5, 0x0, 0x10000a006)
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
clock_gettime(0x0, &(0x7f0000000600)={<r12=>0x0, <r13=>0x0})
ppoll(&(0x7f00000005c0)=[{r11, 0x4001}, {r2}], 0x2, &(0x7f0000000640)={r12, r13+10000000}, &(0x7f0000000680)={[0x6]}, 0x8)

21:02:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x600000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:46 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000010800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x2000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  669.463321][T24588] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x700000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:46 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000020800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:46 executing program 5:
r0 = socket$caif_stream(0x25, 0x1, 0x5)
accept4(r0, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80, 0x800)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) (async, rerun: 64)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r3, r2, 0x0, 0x10000a006)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
write$binfmt_script(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x129) (async, rerun: 32)
bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0x2, 0x2}, 0x6) (async, rerun: 32)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x5, 0x12) (async)
write$binfmt_script(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="2321202e2f66696c6530206d656d6f72792e737761702e63757272656e740020a72d2a402829206d656d6f72792e6576656e747300206d656d6f72792e6576656e747300206d656d6f72792e737761702e63757272656e740020206d656d6f72792e737761702e63757272656e740020da44bc1ba99018ea09ebfde7426128227c250a4207e40758d9225e57a5a4db1e3d41a3054fb4febb72429064baf66f8d4c8c5042004d99fc1d50359ee69f2edae388f7a0ee2c6a4f349cc8fd04cc16e9046a2bb3ac999c8639eb"], 0x9e) (async, rerun: 32)
socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32)
sendfile(r5, r6, 0x0, 0xf03b0000) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x10, 0xffffffffffffffff, 0x0) (rerun: 64)

21:02:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0}) (async)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r10, r5, 0x0, 0x10000a006)
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
clock_gettime(0x0, &(0x7f0000000600)={<r12=>0x0, <r13=>0x0})
ppoll(&(0x7f00000005c0)=[{r11, 0x4001}, {r2}], 0x2, &(0x7f0000000640)={r12, r13+10000000}, &(0x7f0000000680)={[0x6]}, 0x8)

[  669.669788][T24603] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x8030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x1202000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:46 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000030800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (rerun: 32)
sendfile(r10, r5, 0x0, 0x10000a006)
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async, rerun: 32)
clock_gettime(0x0, &(0x7f0000000600)={<r12=>0x0, <r13=>0x0}) (rerun: 32)
ppoll(&(0x7f00000005c0)=[{r11, 0x4001}, {r2}], 0x2, &(0x7f0000000640)={r12, r13+10000000}, &(0x7f0000000680)={[0x6]}, 0x8)

21:02:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x3f000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:46 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000040800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:46 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r5 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r5, 0x0, 0x10000a006)
r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
clock_gettime(0x0, &(0x7f0000000600)={<r12=>0x0, <r13=>0x0})
ppoll(&(0x7f00000005c0)=[{r11, 0x4001}, {r2}], 0x2, &(0x7f0000000640)={r12, r13+10000000}, &(0x7f0000000680)={[0x6]}, 0x8)

[  669.863048][T24621] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x1f00000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:46 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
write(r1, &(0x7f00000005c0)="95da9147ebe9e9c0033ab3649930f45995e67fb9172dc1f8a68e18cb5c9f59009fb53aa737ea20b354c48188aa9dec6f8a1b12e47149b1ed677d6ab00230a073c43857198324de72b01d790cf2ad22d1a0fd2e33a2ec43a8b1e88b65d8a3a702e428ed15ef9f863f5631385df85cfa48644e3b1d70c0731e93713ff326bb35c4678db37c10a517777b741cd315dbd899cbaddb75", 0x94)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f00000009c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x284, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x62d}, {0x6, 0x11, 0xfffc}, {0x8, 0x13, 0x7f}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4d}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x3ff}, {0x8, 0x13, 0x1f}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdcaa}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xffffff36}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8000}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xce}, {0x8, 0x13, 0xcd4cc21}, {0x5}}]}, 0x284}, 0x1, 0x0, 0x0, 0x40084}, 0x41)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x98c37000)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r10, r5, 0x0, 0x10000a006)

21:02:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x40000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:46 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000050800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  670.057166][T24634] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:46 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x43030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x2000000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:46 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000060800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x79000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  670.223497][   T27] audit: type=1804 audit(1668891766.996:725): pid=24637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/976/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0
21:02:47 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000070800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:47 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000060800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x86030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:47 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
write(r1, &(0x7f00000005c0)="95da9147ebe9e9c0033ab3649930f45995e67fb9172dc1f8a68e18cb5c9f59009fb53aa737ea20b354c48188aa9dec6f8a1b12e47149b1ed677d6ab00230a073c43857198324de72b01d790cf2ad22d1a0fd2e33a2ec43a8b1e88b65d8a3a702e428ed15ef9f863f5631385df85cfa48644e3b1d70c0731e93713ff326bb35c4678db37c10a517777b741cd315dbd899cbaddb75", 0x94)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0}) (async)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f00000009c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x284, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x62d}, {0x6, 0x11, 0xfffc}, {0x8, 0x13, 0x7f}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4d}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x3ff}, {0x8, 0x13, 0x1f}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdcaa}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xffffff36}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8000}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xce}, {0x8, 0x13, 0xcd4cc21}, {0x5}}]}, 0x284}, 0x1, 0x0, 0x0, 0x40084}, 0x41) (async)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x98c37000) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r10, r5, 0x0, 0x10000a006)

[  670.340305][T24648] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x4800000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:47 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000080800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x91020000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:47 executing program 5:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write$bt_hci(r2, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xa}}}, 0xe)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5ccb9}]}, 0x4c}}, 0x0)

21:02:47 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000090800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  670.546982][T24663] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  670.558239][   T27] audit: type=1804 audit(1668891767.336:726): pid=24659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/977/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0
21:02:47 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
write(r1, &(0x7f00000005c0)="95da9147ebe9e9c0033ab3649930f45995e67fb9172dc1f8a68e18cb5c9f59009fb53aa737ea20b354c48188aa9dec6f8a1b12e47149b1ed677d6ab00230a073c43857198324de72b01d790cf2ad22d1a0fd2e33a2ec43a8b1e88b65d8a3a702e428ed15ef9f863f5631385df85cfa48644e3b1d70c0731e93713ff326bb35c4678db37c10a517777b741cd315dbd899cbaddb75", 0x94) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0}) (async)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f00000009c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000800}, 0xc, &(0x7f0000000980)={&(0x7f00000006c0)={0x284, r3, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x62d}, {0x6, 0x11, 0xfffc}, {0x8, 0x13, 0x7f}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4d}, {0x8, 0x13, 0x7}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x800}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x3ff}, {0x8, 0x13, 0x1f}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xdcaa}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xffffff36}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x8000}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xce}, {0x8, 0x13, 0xcd4cc21}, {0x5}}]}, 0x284}, 0x1, 0x0, 0x0, 0x40084}, 0x41) (async)
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x11, r2, 0x98c37000)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r10, r5, 0x0, 0x10000a006)

21:02:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x94020000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x4c00000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  670.626907][T24669] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
21:02:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xa1030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:47 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000000a0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x4c02000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xa9010000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  670.840912][T24669] 8021q: adding VLAN 0 to HW filter on device bond4
21:02:47 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fddbdf25050000000e0001006e657464657673696d0008000f0002006e657464657673696d3000000800d16c58ad14cf030000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000f55af16768c408ab500ea55bd6f464dd0abda0433a18423eb76c47f129e96c19fbcbe69ac07d0d420556c8bfcbdcdd6ec0322603b6a78f0d75b075626dc3bd4105c0aa8b8bbd94894b57e68bb544ec03dd9ddee8ed6add84b2721c3671ab5ebbf476ec75d24e24c146fb1c90267676d40359a0e9052a893f69d7e3c0b5e7408bb286e257e0c6a050c92850aec48ef5132fb4ec41ea87c7387d0014e4205448dfd73a5229f8e663914558ea68bf84707e46cd55"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
write$binfmt_script(r4, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}], 0xa, "f10f013c0a0b9fa97a38fffd97103125f3076e1fab198306e9f3388bd485c21c0cbf0ae4388161e663ba974b3e0491361c3a0722e29bdc4dd75176698c8f89bd07762ad22ec9b26d89c73b75512abb2c5a2866f30beff9734ec11a4986b52f1f2b66a093c34289906ef391acc3a4673e1aa5c16461acd32bd67469fe7cae3d068d55b1f31e1a398d52cd940f42b7da88d65e1543b20a2e609adcbe77d9a248bc987870cd81a9336c74b9"}, 0xc9)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xb0030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:47 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000000e0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:47 executing program 5:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340))
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
write$bt_hci(r2, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xa}}}, 0xe) (async)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5ccb9}]}, 0x4c}}, 0x0)

21:02:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x6000000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:47 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000000f0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xb8020000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x6800000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  671.080861][T24699] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
21:02:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xc0020000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  671.152212][   T27] audit: type=1804 audit(1668891767.926:727): pid=24694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/979/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0
21:02:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x6c00000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:48 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000003f0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  671.265371][T24699] 8021q: adding VLAN 0 to HW filter on device bond5
21:02:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xc8010000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:48 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000227bd7000fddbdf25050000000e0001006e657464657673696d0008000f0002006e657464657673696d3000000800d16c58ad14cf030000000000080001007063690011000200303030303a30303a31302e30000000000800030002000000f55af16768c408ab500ea55bd6f464dd0abda0433a18423eb76c47f129e96c19fbcbe69ac07d0d420556c8bfcbdcdd6ec0322603b6a78f0d75b075626dc3bd4105c0aa8b8bbd94894b57e68bb544ec03dd9ddee8ed6add84b2721c3671ab5ebbf476ec75d24e24c146fb1c90267676d40359a0e9052a893f69d7e3c0b5e7408bb286e257e0c6a050c92850aec48ef5132fb4ec41ea87c7387d0014e4205448dfd73a5229f8e663914558ea68bf84707e46cd55"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
write$binfmt_script(r4, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}], 0xa, "f10f013c0a0b9fa97a38fffd97103125f3076e1fab198306e9f3388bd485c21c0cbf0ae4388161e663ba974b3e0491361c3a0722e29bdc4dd75176698c8f89bd07762ad22ec9b26d89c73b75512abb2c5a2866f30beff9734ec11a4986b52f1f2b66a093c34289906ef391acc3a4673e1aa5c16461acd32bd67469fe7cae3d068d55b1f31e1a398d52cd940f42b7da88d65e1543b20a2e609adcbe77d9a248bc987870cd81a9336c74b9"}, 0xc9)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7400000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:48 executing program 5:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write$bt_hci(r2, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xa}}}, 0xe)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5ccb9}]}, 0x4c}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
write$bt_hci(r2, &(0x7f00000000c0)={0x1, @le_ext_create_conn={{0x2043, 0xa}}}, 0xe) (async)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000000000000000000002000", @ANYRES32=r3, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64"], 0x3c}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x5ccb9}]}, 0x4c}}, 0x0) (async)

21:02:48 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000480800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xd0030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7a00000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:48 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000004c0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  671.546455][T24721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'.
21:02:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xe8030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7b01000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xf4000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  671.705230][T24721] 8021q: adding VLAN 0 to HW filter on device bond6
21:02:48 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000000e0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:48 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000600800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:48 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async, rerun: 32)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 32)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async, rerun: 32)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async, rerun: 32)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async, rerun: 32)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6) (rerun: 32)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
write$binfmt_script(r4, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'cgroup.controllers\x00'}], 0xa, "f10f013c0a0b9fa97a38fffd97103125f3076e1fab198306e9f3388bd485c21c0cbf0ae4388161e663ba974b3e0491361c3a0722e29bdc4dd75176698c8f89bd07762ad22ec9b26d89c73b75512abb2c5a2866f30beff9734ec11a4986b52f1f2b66a093c34289906ef391acc3a4673e1aa5c16461acd32bd67469fe7cae3d068d55b1f31e1a398d52cd940f42b7da88d65e1543b20a2e609adcbe77d9a248bc987870cd81a9336c74b9"}, 0xc9) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xf9030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x7c02000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:48 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000680800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xa502000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:48 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xfe030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:48 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000006c0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xa800000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:49 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xfeffffff], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:49 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000004730800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xad03000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:49 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
pwrite64(r4, &(0x7f00000005c0)="be07771c53e9b712936753c56aa01de182ea35db58c1f6374c14da0dd941b5f04aae62562b44f18811094a6b01057ba2aa6e90d56a7c84f9cdb831f96602ad9546b38b45266c436e471ca9f8", 0x4c, 0x8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r8, r4, 0x0, 0x10000a006)

21:02:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xb003000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:49 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xff000000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:49 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000740800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:49 executing program 5:
r0 = socket(0x2b, 0x1, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket(0xc, 0xa, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r2, r1, 0x0, 0x10000a006)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff95, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x19a}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x0, 0x12, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8014}, 0x8024)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1000)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x0)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1}, 0x40)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000240))

[  672.396229][T24785] 
[  672.398612][T24785] =====================================================
[  672.405558][T24785] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  672.413026][T24785] 6.1.0-rc5-syzkaller-00113-g2360f9b8c4e8 #0 Not tainted
[  672.420067][T24785] -----------------------------------------------------
[  672.427007][T24785] syz-executor.5/24785 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire:
[  672.435095][T24785] ffff8880463a03b8 (k-clock-AF_INET){+++.}-{2:2}, at: sock_i_uid+0x1f/0xb0
[  672.443768][T24785] 
[  672.443768][T24785] and this task is already holding:
[  672.451143][T24785] ffffc900018168a0 (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2}, at: inet_csk_get_port+0x66a/0x2640
[  672.461776][T24785] which would create a new lock dependency:
[  672.467676][T24785]  (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} -> (k-clock-AF_INET){+++.}-{2:2}
[  672.476577][T24785] 
[  672.476577][T24785] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  672.486021][T24785]  (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2}
[  672.486054][T24785] 
[  672.486054][T24785] ... which became SOFTIRQ-irq-safe at:
[  672.499714][T24785]   lock_acquire+0x1e3/0x630
[  672.504332][T24785]   _raw_spin_lock+0x2e/0x40
[  672.508933][T24785]   __inet_inherit_port+0x297/0x14e0
[  672.514232][T24785]   tcp_v4_syn_recv_sock+0xb5b/0x14c0
[  672.519643][T24785]   tcp_check_req+0x632/0x1aa0
[  672.524416][T24785]   tcp_v4_rcv+0x24b4/0x3980
[  672.529011][T24785]   ip_protocol_deliver_rcu+0x9f/0x7c0
[  672.534477][T24785]   ip_local_deliver_finish+0x2ec/0x4c0
[  672.540031][T24785]   ip_local_deliver+0x1ae/0x200
[  672.544973][T24785]   ip_sublist_rcv_finish+0x9a/0x2c0
[  672.550276][T24785]   ip_sublist_rcv+0x533/0x980
[  672.555051][T24785]   ip_list_rcv+0x31e/0x470
[  672.559565][T24785]   __netif_receive_skb_list_core+0x548/0x8f0
[  672.565683][T24785]   netif_receive_skb_list_internal+0x75f/0xd90
[  672.572035][T24785]   napi_complete_done+0x1f5/0x890
[  672.577169][T24785]   virtnet_poll+0xd08/0x1300
[  672.581907][T24785]   __napi_poll+0xb8/0x770
[  672.586342][T24785]   net_rx_action+0xa00/0xde0
[  672.591040][T24785]   __do_softirq+0x1fb/0xadc
[  672.595684][T24785]   __irq_exit_rcu+0x123/0x180
[  672.600734][T24785]   irq_exit_rcu+0x9/0x20
[  672.605067][T24785]   common_interrupt+0xad/0xd0
[  672.609872][T24785]   asm_common_interrupt+0x26/0x40
[  672.615015][T24785]   acpi_idle_do_entry+0x1fd/0x2a0
[  672.620142][T24785]   acpi_idle_enter+0x368/0x510
[  672.625009][T24785]   cpuidle_enter_state+0x1af/0xd40
[  672.630296][T24785]   cpuidle_enter+0x4e/0xa0
[  672.634829][T24785]   do_idle+0x3f7/0x590
[  672.639000][T24785]   cpu_startup_entry+0x18/0x20
[  672.643875][T24785]   start_secondary+0x256/0x300
[  672.648747][T24785]   secondary_startup_64_no_verify+0xce/0xdb
[  672.654759][T24785] 
[  672.654759][T24785] to a SOFTIRQ-irq-unsafe lock:
[  672.661791][T24785]  (k-clock-AF_INET){+++.}-{2:2}
[  672.661828][T24785] 
[  672.661828][T24785] ... which became SOFTIRQ-irq-unsafe at:
[  672.674655][T24785] ...
[  672.674665][T24785]   lock_acquire+0x1e3/0x630
[  672.681867][T24785]   _raw_write_lock+0x2e/0x40
[  672.686589][T24785]   l2tp_tunnel_register+0x126/0x1210
[  672.692083][T24785]   l2tp_nl_cmd_tunnel_create+0x3d6/0x8b0
[  672.697836][T24785]   genl_family_rcv_msg_doit+0x228/0x320
[  672.703481][T24785]   genl_rcv_msg+0x445/0x780
[  672.708082][T24785]   netlink_rcv_skb+0x157/0x430
[  672.712939][T24785]   genl_rcv+0x28/0x40
[  672.717014][T24785]   netlink_unicast+0x547/0x7f0
[  672.721887][T24785]   netlink_sendmsg+0x91b/0xe10
[  672.726762][T24785]   sock_sendmsg+0xd3/0x120
[  672.731300][T24785]   ____sys_sendmsg+0x712/0x8c0
[  672.736176][T24785]   ___sys_sendmsg+0x110/0x1b0
[  672.740954][T24785]   __sys_sendmsg+0xf7/0x1c0
[  672.745556][T24785]   do_syscall_64+0x39/0xb0
[  672.750082][T24785]   entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  672.756080][T24785] 
[  672.756080][T24785] other info that might help us debug this:
[  672.756080][T24785] 
[  672.766307][T24785]  Possible interrupt unsafe locking scenario:
[  672.766307][T24785] 
[  672.774618][T24785]        CPU0                    CPU1
[  672.779977][T24785]        ----                    ----
[  672.785335][T24785]   lock(k-clock-AF_INET);
[  672.789758][T24785]                                local_irq_disable();
[  672.796507][T24785]                                lock(&tcp_hashinfo.bhash[i].lock);
[  672.804489][T24785]                                lock(k-clock-AF_INET);
[  672.811425][T24785]   <Interrupt>
[  672.814875][T24785]     lock(&tcp_hashinfo.bhash[i].lock);
[  672.820538][T24785] 
[  672.820538][T24785]  *** DEADLOCK ***
[  672.820538][T24785] 
[  672.828694][T24785] 3 locks held by syz-executor.5/24785:
[  672.834246][T24785]  #0: ffff88804950a2f0 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_bind+0x112/0x390
[  672.843345][T24785]  #1: ffff8880463a0130 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: __inet_bind+0x8c3/0xc90
[  672.852877][T24785]  #2: ffffc900018168a0 (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2}, at: inet_csk_get_port+0x66a/0x2640
[  672.863878][T24785] 
[  672.863878][T24785] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  672.874281][T24785] -> (&tcp_hashinfo.bhash[i].lock){+.-.}-{2:2} {
[  672.880640][T24785]    HARDIRQ-ON-W at:
[  672.884624][T24785]                     lock_acquire+0x1e3/0x630
[  672.890802][T24785]                     _raw_spin_lock_bh+0x33/0x40
[  672.897233][T24785]                     inet_csk_get_port+0x66a/0x2640
[  672.903933][T24785]                     __inet6_bind+0x625/0x1b20
[  672.910266][T24785]                     inet6_bind+0x177/0x220
[  672.916268][T24785]                     rds_tcp_listen_init+0x2a9/0x4e0
[  672.923088][T24785]                     rds_tcp_init_net+0x21d/0x4f0
[  672.929603][T24785]                     ops_init+0xb9/0x680
[  672.935346][T24785]                     register_pernet_operations+0x35a/0x850
[  672.942768][T24785]                     register_pernet_device+0x2a/0x80
[  672.949638][T24785]                     rds_tcp_init+0x65/0xd3
[  672.955635][T24785]                     do_one_initcall+0x141/0x780
[  672.962065][T24785]                     kernel_init_freeable+0x6ff/0x788
[  672.968938][T24785]                     kernel_init+0x1e/0x1d0
[  672.974929][T24785]                     ret_from_fork+0x1f/0x30
[  672.981038][T24785]    IN-SOFTIRQ-W at:
[  672.985022][T24785]                     lock_acquire+0x1e3/0x630
[  672.991203][T24785]                     _raw_spin_lock+0x2e/0x40
[  672.997377][T24785]                     __inet_inherit_port+0x297/0x14e0
[  673.004246][T24785]                     tcp_v4_syn_recv_sock+0xb5b/0x14c0
[  673.011378][T24785]                     tcp_check_req+0x632/0x1aa0
[  673.017730][T24785]                     tcp_v4_rcv+0x24b4/0x3980
[  673.023900][T24785]                     ip_protocol_deliver_rcu+0x9f/0x7c0
[  673.030939][T24785]                     ip_local_deliver_finish+0x2ec/0x4c0
[  673.038070][T24785]                     ip_local_deliver+0x1ae/0x200
[  673.044587][T24785]                     ip_sublist_rcv_finish+0x9a/0x2c0
[  673.051449][T24785]                     ip_sublist_rcv+0x533/0x980
[  673.057792][T24785]                     ip_list_rcv+0x31e/0x470
[  673.063874][T24785]                     __netif_receive_skb_list_core+0x548/0x8f0
[  673.071537][T24785]                     netif_receive_skb_list_internal+0x75f/0xd90
[  673.079377][T24785]                     napi_complete_done+0x1f5/0x890
[  673.086084][T24785]                     virtnet_poll+0xd08/0x1300
[  673.092338][T24785]                     __napi_poll+0xb8/0x770
[  673.098338][T24785]                     net_rx_action+0xa00/0xde0
[  673.104599][T24785]                     __do_softirq+0x1fb/0xadc
[  673.110774][T24785]                     __irq_exit_rcu+0x123/0x180
[  673.117128][T24785]                     irq_exit_rcu+0x9/0x20
[  673.123025][T24785]                     common_interrupt+0xad/0xd0
[  673.129372][T24785]                     asm_common_interrupt+0x26/0x40
[  673.136065][T24785]                     acpi_idle_do_entry+0x1fd/0x2a0
[  673.142750][T24785]                     acpi_idle_enter+0x368/0x510
[  673.149175][T24785]                     cpuidle_enter_state+0x1af/0xd40
[  673.155955][T24785]                     cpuidle_enter+0x4e/0xa0
[  673.162038][T24785]                     do_idle+0x3f7/0x590
[  673.167768][T24785]                     cpu_startup_entry+0x18/0x20
[  673.174194][T24785]                     start_secondary+0x256/0x300
[  673.180646][T24785]                     secondary_startup_64_no_verify+0xce/0xdb
[  673.188207][T24785]    INITIAL USE at:
[  673.192105][T24785]                    lock_acquire+0x1e3/0x630
[  673.198193][T24785]                    _raw_spin_lock_bh+0x33/0x40
[  673.204538][T24785]                    inet_csk_get_port+0x66a/0x2640
[  673.211237][T24785]                    __inet6_bind+0x625/0x1b20
[  673.217421][T24785]                    inet6_bind+0x177/0x220
[  673.223330][T24785]                    rds_tcp_listen_init+0x2a9/0x4e0
[  673.230020][T24785]                    rds_tcp_init_net+0x21d/0x4f0
[  673.236447][T24785]                    ops_init+0xb9/0x680
[  673.242104][T24785]                    register_pernet_operations+0x35a/0x850
[  673.249405][T24785]                    register_pernet_device+0x2a/0x80
[  673.256184][T24785]                    rds_tcp_init+0x65/0xd3
[  673.262094][T24785]                    do_one_initcall+0x141/0x780
[  673.268438][T24785]                    kernel_init_freeable+0x6ff/0x788
[  673.275222][T24785]                    kernel_init+0x1e/0x1d0
[  673.281126][T24785]                    ret_from_fork+0x1f/0x30
[  673.287127][T24785]  }
[  673.289622][T24785]  ... key      at: [<ffffffff91d7c600>] __key.1+0x0/0x40
[  673.296749][T24785] 
[  673.296749][T24785] the dependencies between the lock to be acquired
[  673.296759][T24785]  and SOFTIRQ-irq-unsafe lock:
[  673.310273][T24785] -> (k-clock-AF_INET){+++.}-{2:2} {
[  673.315584][T24785]    HARDIRQ-ON-W at:
[  673.319565][T24785]                     lock_acquire+0x1e3/0x630
[  673.325741][T24785]                     _raw_write_lock_bh+0x33/0x40
[  673.332261][T24785]                     mptcp_init_sock+0x434/0x840
[  673.338750][T24785]                     inet_create+0x8a9/0xea0
[  673.344826][T24785]                     __sock_create+0x359/0x790
[  673.351087][T24785]                     __sys_socket+0x133/0x250
[  673.357267][T24785]                     __x64_sys_socket+0x73/0xb0
[  673.363617][T24785]                     do_syscall_64+0x39/0xb0
[  673.369704][T24785]                     entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  673.377269][T24785]    HARDIRQ-ON-R at:
[  673.381256][T24785]                     lock_acquire+0x1e3/0x630
[  673.387520][T24785]                     _raw_read_lock_bh+0x3f/0x70
[  673.393946][T24785]                     sock_i_uid+0x1f/0xb0
[  673.399764][T24785]                     udp_lib_lport_inuse+0x32/0x490
[  673.406460][T24785]                     udp_lib_get_port+0x835/0x18c0
[  673.413065][T24785]                     __inet_bind+0x831/0xc90
[  673.419317][T24785]                     inet_bind+0x177/0x220
[  673.425231][T24785]                     udp_sock_create4+0x1d1/0x490
[  673.431803][T24785]                     rxe_setup_udp_tunnel.constprop.0+0xfc/0x220
[  673.439633][T24785]                     rxe_net_init+0x1f/0xd0
[  673.445626][T24785]                     rxe_module_init+0x10/0x49
[  673.451875][T24785]                     do_one_initcall+0x141/0x780
[  673.458308][T24785]                     kernel_init_freeable+0x6ff/0x788
[  673.465178][T24785]                     kernel_init+0x1e/0x1d0
[  673.471263][T24785]                     ret_from_fork+0x1f/0x30
[  673.477347][T24785]    SOFTIRQ-ON-W at:
[  673.481328][T24785]                     lock_acquire+0x1e3/0x630
[  673.487507][T24785]                     _raw_write_lock+0x2e/0x40
[  673.493769][T24785]                     l2tp_tunnel_register+0x126/0x1210
[  673.500723][T24785]                     l2tp_nl_cmd_tunnel_create+0x3d6/0x8b0
[  673.508027][T24785]                     genl_family_rcv_msg_doit+0x228/0x320
[  673.515240][T24785]                     genl_rcv_msg+0x445/0x780
[  673.521403][T24785]                     netlink_rcv_skb+0x157/0x430
[  673.527829][T24785]                     genl_rcv+0x28/0x40
[  673.533468][T24785]                     netlink_unicast+0x547/0x7f0
[  673.539887][T24785]                     netlink_sendmsg+0x91b/0xe10
[  673.546308][T24785]                     sock_sendmsg+0xd3/0x120
[  673.552394][T24785]                     ____sys_sendmsg+0x712/0x8c0
[  673.558832][T24785]                     ___sys_sendmsg+0x110/0x1b0
[  673.565167][T24785]                     __sys_sendmsg+0xf7/0x1c0
[  673.571329][T24785]                     do_syscall_64+0x39/0xb0
[  673.577422][T24785]                     entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  673.584986][T24785]    INITIAL USE at:
[  673.588880][T24785]                    lock_acquire+0x1e3/0x630
[  673.594977][T24785]                    _raw_write_lock_bh+0x33/0x40
[  673.601403][T24785]                    mptcp_init_sock+0x434/0x840
[  673.607740][T24785]                    inet_create+0x8a9/0xea0
[  673.613732][T24785]                    __sock_create+0x359/0x790
[  673.619910][T24785]                    __sys_socket+0x133/0x250
[  673.625996][T24785]                    __x64_sys_socket+0x73/0xb0
[  673.632256][T24785]                    do_syscall_64+0x39/0xb0
[  673.638252][T24785]                    entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  673.645726][T24785]    INITIAL READ USE at:
[  673.650056][T24785]                         lock_acquire+0x1e3/0x630
[  673.656578][T24785]                         _raw_read_lock_bh+0x3f/0x70
[  673.663349][T24785]                         sock_i_uid+0x1f/0xb0
[  673.669509][T24785]                         udp_lib_lport_inuse+0x32/0x490
[  673.676551][T24785]                         udp_lib_get_port+0x835/0x18c0
[  673.683504][T24785]                         __inet_bind+0x831/0xc90
[  673.689928][T24785]                         inet_bind+0x177/0x220
[  673.696264][T24785]                         udp_sock_create4+0x1d1/0x490
[  673.703127][T24785]                         rxe_setup_udp_tunnel.constprop.0+0xfc/0x220
[  673.711296][T24785]                         rxe_net_init+0x1f/0xd0
[  673.717634][T24785]                         rxe_module_init+0x10/0x49
[  673.724231][T24785]                         do_one_initcall+0x141/0x780
[  673.731026][T24785]                         kernel_init_freeable+0x6ff/0x788
[  673.738242][T24785]                         kernel_init+0x1e/0x1d0
[  673.744576][T24785]                         ret_from_fork+0x1f/0x30
[  673.751004][T24785]  }
[  673.753500][T24785]  ... key      at: [<ffffffff91d5be20>] af_kern_callback_keys+0x20/0x300
[  673.762010][T24785]  ... acquired at:
[  673.765804][T24785]    lock_acquire+0x1e3/0x630
[  673.770500][T24785]    _raw_read_lock_bh+0x3f/0x70
[  673.775446][T24785]    sock_i_uid+0x1f/0xb0
[  673.779790][T24785]    inet_bhash2_addr_any_conflict+0x2d/0x460
[  673.785881][T24785]    inet_csk_get_port+0x1cb2/0x2640
[  673.791184][T24785]    __inet_bind+0x831/0xc90
[  673.795787][T24785]    inet_bind+0x177/0x220
[  673.800215][T24785]    smc_bind+0x2e6/0x390
[  673.804556][T24785]    __sys_bind+0x1ed/0x260
[  673.809060][T24785]    __x64_sys_bind+0x73/0xb0
[  673.813741][T24785]    do_syscall_64+0x39/0xb0
[  673.818345][T24785]    entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  673.824425][T24785] 
[  673.826741][T24785] 
[  673.826741][T24785] stack backtrace:
[  673.832620][T24785] CPU: 0 PID: 24785 Comm: syz-executor.5 Not tainted 6.1.0-rc5-syzkaller-00113-g2360f9b8c4e8 #0
[  673.843045][T24785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[  673.853108][T24785] Call Trace:
[  673.856386][T24785]  <TASK>
[  673.859319][T24785]  dump_stack_lvl+0xd1/0x138
[  673.863928][T24785]  check_irq_usage.cold+0x4e4/0x761
[  673.869166][T24785]  ? mark_lock.part.0+0xee/0x1910
[  673.874222][T24785]  ? print_shortest_lock_dependencies_backwards+0x80/0x80
[  673.881372][T24785]  ? check_path.constprop.0+0x24/0x50
[  673.886762][T24785]  ? register_lock_class+0xbe/0x1120
[  673.892075][T24785]  ? __lock_acquire+0xbc3/0x56d0
[  673.897036][T24785]  __lock_acquire+0x2a5b/0x56d0
[  673.901932][T24785]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[  673.907958][T24785]  lock_acquire+0x1e3/0x630
[  673.912490][T24785]  ? sock_i_uid+0x1f/0xb0
[  673.916836][T24785]  ? lock_release+0x810/0x810
[  673.921541][T24785]  ? memcg_slab_post_alloc_hook+0x249/0x480
[  673.927449][T24785]  ? lock_downgrade+0x6e0/0x6e0
[  673.932327][T24785]  _raw_read_lock_bh+0x3f/0x70
[  673.937107][T24785]  ? sock_i_uid+0x1f/0xb0
[  673.941456][T24785]  sock_i_uid+0x1f/0xb0
[  673.945624][T24785]  inet_bhash2_addr_any_conflict+0x2d/0x460
[  673.951546][T24785]  inet_csk_get_port+0x1cb2/0x2640
[  673.956689][T24785]  ? __inet_bind+0x8c3/0xc90
[  673.961292][T24785]  ? inet_csk_update_fastreuse+0xb30/0xb30
[  673.967123][T24785]  ? mark_held_locks+0x9f/0xe0
[  673.971911][T24785]  ? __local_bh_enable_ip+0xa4/0x130
[  673.977204][T24785]  __inet_bind+0x831/0xc90
[  673.981657][T24785]  inet_bind+0x177/0x220
[  673.985909][T24785]  ? __inet_bind+0xc90/0xc90
[  673.990512][T24785]  ? __local_bh_enable_ip+0xa4/0x130
[  673.995804][T24785]  smc_bind+0x2e6/0x390
[  673.999975][T24785]  __sys_bind+0x1ed/0x260
[  674.004308][T24785]  ? __ia32_sys_socketpair+0x100/0x100
[  674.009775][T24785]  ? restore_fpregs_from_fpstate+0xc1/0x1c0
[  674.015695][T24785]  ? syscall_enter_from_user_mode+0x26/0xb0
[  674.021601][T24785]  __x64_sys_bind+0x73/0xb0
[  674.026109][T24785]  do_syscall_64+0x39/0xb0
[  674.030563][T24785]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[  674.036491][T24785] RIP: 0033:0x7fcb7f08b639
[  674.040924][T24785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[  674.060548][T24785] RSP: 002b:00007fcb7fd76168 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[  674.068976][T24785] RAX: ffffffffffffffda RBX: 00007fcb7f1abf80 RCX: 00007fcb7f08b639
[  674.076951][T24785] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003
[  674.084923][T24785] RBP: 00007fcb7f0e6ae9 R08: 0000000000000000 R09: 0000000000000000
[  674.092911][T24785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  674.100898][T24785] R13: 00007fff1ab57baf R14: 00007fcb7fd76300 R15: 0000000000022000
[  674.108895][T24785]  </TASK>
[  674.150288][   T27] audit: type=1804 audit(1668891770.926:728): pid=24779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/982/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0
21:02:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xbc02000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xff030000], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007000000007a0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xffff0300], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xc002000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700ffffff9e0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  674.282943][T24792] recent_mt_check: 13 callbacks suppressed
[  674.282962][T24792] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:51 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700fffffff00800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
pwrite64(r4, &(0x7f00000005c0)="be07771c53e9b712936753c56aa01de182ea35db58c1f6374c14da0dd941b5f04aae62562b44f18811094a6b01057ba2aa6e90d56a7c84f9cdb831f96602ad9546b38b45266c436e471ca9f8", 0x4c, 0x8) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async)
sendfile(r8, r4, 0x0, 0x10000a006)

21:02:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0xfffffffe], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23090000000000000000010000000500070000f0ffff0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:51 executing program 5:
r0 = socket(0x2b, 0x1, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async)
connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
socket(0xc, 0xa, 0x2) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r2, r1, 0x0, 0x10000a006) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff95, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x19a}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x0, 0x12, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8014}, 0x8024) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1000) (async)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x0) (async)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1}, 0x40) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000240))

[  674.396907][T24800] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xcd00000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007007fffffff0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x2], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async, rerun: 64)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async, rerun: 64)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
pwrite64(r4, &(0x7f00000005c0)="be07771c53e9b712936753c56aa01de182ea35db58c1f6374c14da0dd941b5f04aae62562b44f18811094a6b01057ba2aa6e90d56a7c84f9cdb831f96602ad9546b38b45266c436e471ca9f8", 0x4c, 0x8)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async, rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r7 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r7, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r8, r4, 0x0, 0x10000a006)

21:02:51 executing program 5:
r0 = socket(0x2b, 0x1, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket(0xc, 0xa, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r2, r1, 0x0, 0x10000a006)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff95, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x19a}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x0, 0x12, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8014}, 0x8024)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1000)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x0)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1}, 0x40)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000240))
socket(0x2b, 0x1, 0x0) (async)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) (async)
connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
socket(0xc, 0xa, 0x2) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendfile(r2, r1, 0x0, 0x10000a006) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff95, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x19a}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x0, 0x12, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8014}, 0x8024) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1000) (async)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x0) (async)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1}, 0x40) (async)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000240)) (async)

[  674.532604][T24817] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xd40e000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007009effffff0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x3], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xf803000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700f0ffffff0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x4], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  674.659884][T24838] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  674.677173][   T27] audit: type=1804 audit(1668891771.456:729): pid=24836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/984/cgroup.controllers" dev="sda1" ino=1161 res=1 errno=0
21:02:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cd82c4607ebc1a32", @ANYRES16=r2, @ANYBLOB="080025bd7000fcdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:51 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000100090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  674.769049][T24849] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x79], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xfa03000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000300090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  674.809487][T24855] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  674.882196][T24861] xt_recent: hitcount (929) is larger than allowed maximum (255)
[  674.890484][   T27] audit: type=1804 audit(1668891771.666:730): pid=24850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/985/cgroup.controllers" dev="sda1" ino=1173 res=1 errno=0
21:02:51 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309000000000000000001000000050007007fffffff0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0xf4], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  674.931146][T24870] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
21:02:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x1a9], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0xfc03000000000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000200000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x1c8], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 5:
r0 = socket(0x2b, 0x1, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket(0xc, 0xa, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r2, r1, 0x0, 0x10000a006)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff95, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x19a}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x0, 0x12, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8014}, 0x8024)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1000)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x0)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1}, 0x40)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000240))

[  675.041548][T24878] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:51 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0) (async)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async, rerun: 64)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 64)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cd82c4607ebc1a32", @ANYRES16=r2, @ANYBLOB="080025bd7000fcdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async, rerun: 64)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (rerun: 64)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async, rerun: 32)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6) (rerun: 32)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async, rerun: 64)
sendfile(r9, r4, 0x0, 0x10000a006) (rerun: 64)

21:02:51 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000300000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x0, 0x2}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x291], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x294], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:52 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000400000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  675.200932][T24891] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:52 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x0, 0x3}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x2b8], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:52 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000500000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cd82c4607ebc1a32", @ANYRES16=r2, @ANYBLOB="080025bd7000fcdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0}) (async)
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async, rerun: 32)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async, rerun: 32)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

[  675.301612][T24901] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:52 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000600000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:52 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cd82c4607ebc1a32", @ANYRES16=r2, @ANYBLOB="080025bd7000fcdbdf2545000000080001007063690011000200303030303a30303a31302e300000000008008e0002000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r6)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r8, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r9, r4, 0x0, 0x10000a006)

21:02:52 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x0, 0x4}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:52 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000700000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x2c0], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:52 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000980)={{'\x00', 0x2}, {0x101}, 0x10, 0x0, 0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)="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", 0x197, 0x0, &(0x7f0000001500)={0x2, 0x109d, {0x1, 0xc, 0x1000, "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", 0x90, "3815b73d85c7bba9ca5dba87394849db950bc7de0b1af3eafec4a0d0353a9cdfe337c074ceef7be51155ecd1ed7541ce58441951fd719b47c372fa497dac5b0ec730380e1bf8d991921f47884289a5814cac93a96cfe93563a2dd1ec8cbb8b9b9ef79a9f5f1900f479f9e2988bfe596996602e7d179d343dfd39f84383b26685a32ceffe0e696dff9e828fdef9ef9e72"}, 0xd8, "6580a0ecf23c99df89bb4e76bdfab1dd2a32c3fcde2ebebdfe9a360ab381c3c6b37b439c30c438f3719fa52da83cef81ff4b712a5332573fe190444c92e157e0cac070fd7d453f32068abb9640b61b6854e4b9a8e47febbe249099b34f065f323a1667c85f2b4f4ffec14099e6e742a30b6cd8dbe9b4211507e1f9bfb7831caaaafc8f08c7bd644f2b656638a2abd53b989a87f67cf5f1c4e543e29a9d6819f0765137c0ddfc32f5a4678a2f5d727b6360646c77b1d1aadd4b42c44b8ead0dec7b958dacc43ce160208104af837e52dd43906c0e55a85168"}, 0x1181})
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124})
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './file0', [{0x20, '{**#:('}, {}, {0x20, 'bond_slave_1\x00'}, {0x20, 'nl80211\x00'}, {}, {0x20, 'devlink\x00'}, {}, {0x20, 'netdevsim\x00'}], 0xa, "ffa2e8bb51fdc516684af487f84c5a7f8d6674a4c02666a96ef2594e8c510268501b9d19348e6a22952f08c30a88f778990ee9420c4a6e22932f0fb9a3e69486564a9d2867f8b2912d8192a943a9edd3ef23e0b9afb21e62bad3acc14cdaa5808d5747c4b65e8fb0c4fd0e0b9ecfb18ceead7d489b8ddd1c8ef14bc8617000c0c4e0e01fa1ceab3a9c3d3247946bb31afd1760ad588e9b976af73b1b257947719b1db9dfc67c05e8acfb42992f479bda27dd076c7968c3912a16e565da0e589050c9aed6baece6e6d7b9"}, 0x10a)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r10, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendfile(r10, r7, &(0x7f00000005c0)=0x1, 0x8)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0))
sendfile(r11, r5, 0x0, 0x10000a006)

21:02:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x300], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:52 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000800000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

[  675.994301][T24918] xt_recent: hitcount (929) is larger than allowed maximum (255)
21:02:52 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x0, 0x5}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x308], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:52 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000900000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:52 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x0, 0x6}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:52 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x343], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  676.140042][   T27] audit: type=1804 audit(1668891772.916:731): pid=24923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/988/cgroup.controllers" dev="sda1" ino=1169 res=1 errno=0
[  676.265042][   T27] audit: type=1804 audit(1668891773.036:732): pid=24926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir2243263782/syzkaller.wyOINV/1110/cgroup.controllers" dev="sda1" ino=1170 res=1 errno=0
21:02:53 executing program 5:
r0 = socket(0x2b, 0x1, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
connect$rds(r0, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
socket(0xc, 0xa, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r2, r1, 0x0, 0x10000a006)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff95, &(0x7f00000000c0)={&(0x7f0000000200)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_HEADER={0x4}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x19a}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x0, 0x12, 0x80000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x8014}, 0x8024)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x1000)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[], 0x7ffff000}}, 0x0)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000f40)=""/4096, 0x1000}], 0x1}, 0x40)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000240))

21:02:53 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000a00000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:53 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x386], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x0, 0x7}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:53 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff}) (async)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000) (async)
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000980)={{'\x00', 0x2}, {0x101}, 0x10, 0x0, 0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)="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", 0x197, 0x0, &(0x7f0000001500)={0x2, 0x109d, {0x1, 0xc, 0x1000, "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", 0x90, "3815b73d85c7bba9ca5dba87394849db950bc7de0b1af3eafec4a0d0353a9cdfe337c074ceef7be51155ecd1ed7541ce58441951fd719b47c372fa497dac5b0ec730380e1bf8d991921f47884289a5814cac93a96cfe93563a2dd1ec8cbb8b9b9ef79a9f5f1900f479f9e2988bfe596996602e7d179d343dfd39f84383b26685a32ceffe0e696dff9e828fdef9ef9e72"}, 0xd8, "6580a0ecf23c99df89bb4e76bdfab1dd2a32c3fcde2ebebdfe9a360ab381c3c6b37b439c30c438f3719fa52da83cef81ff4b712a5332573fe190444c92e157e0cac070fd7d453f32068abb9640b61b6854e4b9a8e47febbe249099b34f065f323a1667c85f2b4f4ffec14099e6e742a30b6cd8dbe9b4211507e1f9bfb7831caaaafc8f08c7bd644f2b656638a2abd53b989a87f67cf5f1c4e543e29a9d6819f0765137c0ddfc32f5a4678a2f5d727b6360646c77b1d1aadd4b42c44b8ead0dec7b958dacc43ce160208104af837e52dd43906c0e55a85168"}, 0x1181}) (async)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000) (async)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180))
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async)
write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './file0', [{0x20, '{**#:('}, {}, {0x20, 'bond_slave_1\x00'}, {0x20, 'nl80211\x00'}, {}, {0x20, 'devlink\x00'}, {}, {0x20, 'netdevsim\x00'}], 0xa, "ffa2e8bb51fdc516684af487f84c5a7f8d6674a4c02666a96ef2594e8c510268501b9d19348e6a22952f08c30a88f778990ee9420c4a6e22932f0fb9a3e69486564a9d2867f8b2912d8192a943a9edd3ef23e0b9afb21e62bad3acc14cdaa5808d5747c4b65e8fb0c4fd0e0b9ecfb18ceead7d489b8ddd1c8ef14bc8617000c0c4e0e01fa1ceab3a9c3d3247946bb31afd1760ad588e9b976af73b1b257947719b1db9dfc67c05e8acfb42992f479bda27dd076c7968c3912a16e565da0e589050c9aed6baece6e6d7b9"}, 0x10a)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan1\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r7)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async, rerun: 32)
r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32)
getsockopt$netrom_NETROM_IDLE(r10, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
sendfile(r10, r7, &(0x7f00000005c0)=0x1, 0x8) (async, rerun: 32)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x78}]}, 0x2c}}, 0x40880) (async, rerun: 32)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) (async, rerun: 64)
sendfile(r11, r5, 0x0, 0x10000a006) (rerun: 64)

21:02:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x0, 0x48}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:53 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000e00000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:53 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x3a1], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:53 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x3b0], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x0, 0x4c}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:53 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000f00000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x0, 0x60}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

[  676.609569][   T27] audit: type=1804 audit(1668891773.376:733): pid=24957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1421364845/syzkaller.tXhXcC/989/cgroup.controllers" dev="sda1" ino=1176 res=1 errno=0
21:02:54 executing program 5:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700ffffff9e0800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:54 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700004800000800090000000000060002000100000008000a0000000000080017"], 0x3c}}, 0x0)

21:02:54 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [0x0, 0x0, 0x3d0], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x2c0, 0x9403, 0x0, 0x2c0, 0x2c0, 0x3b0, 0x3d8, 0x3d8, 0x3b0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2c0, 0x0, {0x0, 0x68}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3a1, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@mcast1, @dev, [], [], 'batadv_slave_1\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)

21:02:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000140)={0x401, 0x8e3, 0x8, 0x7, 0xeb, 0x42, 0x8001}, 0xc) (async)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYRES32=0x0], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r0, 0x0)
pipe(&(0x7f0000000380)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x60, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x10040000)
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000980)={{'\x00', 0x2}, {0x101}, 0x10, 0x0, 0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)="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", 0x197, 0x0, &(0x7f0000001500)={0x2, 0x109d, {0x1, 0xc, 0x1000, "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", 0x90, "3815b73d85c7bba9ca5dba87394849db950bc7de0b1af3eafec4a0d0353a9cdfe337c074ceef7be51155ecd1ed7541ce58441951fd719b47c372fa497dac5b0ec730380e1bf8d991921f47884289a5814cac93a96cfe93563a2dd1ec8cbb8b9b9ef79a9f5f1900f479f9e2988bfe596996602e7d179d343dfd39f84383b26685a32ceffe0e696dff9e828fdef9ef9e72"}, 0xd8, "6580a0ecf23c99df89bb4e76bdfab1dd2a32c3fcde2ebebdfe9a360ab381c3c6b37b439c30c438f3719fa52da83cef81ff4b712a5332573fe190444c92e157e0cac070fd7d453f32068abb9640b61b6854e4b9a8e47febbe249099b34f065f323a1667c85f2b4f4ffec14099e6e742a30b6cd8dbe9b4211507e1f9bfb7831caaaafc8f08c7bd644f2b656638a2abd53b989a87f67cf5f1c4e543e29a9d6819f0765137c0ddfc32f5a4678a2f5d727b6360646c77b1d1aadd4b42c44b8ead0dec7b958dacc43ce160208104af837e52dd43906c0e55a85168"}, 0x1181}) (async, rerun: 32)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (rerun: 32)
ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x1, 0x7fff, 0x7c, &(0x7f0000000500)=""/124}) (async)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x38, r2, 0x800, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async)
mmap(&(0x7f0000652000/0x1000)=nil, 0x1000, 0x3000006, 0x13, r0, 0x10746000)
ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000180)) (async)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x4)
write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './file0', [{0x20, '{**#:('}, {}, {0x20, 'bond_slave_1\x00'}, {0x20, 'nl80211\x00'}, {}, {0x20, 'devlink\x00'}, {}, {0x20, 'netdevsim\x00'}], 0xa, "ffa2e8bb51fdc516684af487f84c5a7f8d6674a4c02666a96ef2594e8c510268501b9d19348e6a22952f08c30a88f778990ee9420c4a6e22932f0fb9a3e69486564a9d2867f8b2912d8192a943a9edd3ef23e0b9afb21e62bad3acc14cdaa5808d5747c4b65e8fb0c4fd0e0b9ecfb18ceead7d489b8ddd1c8ef14bc8617000c0c4e0e01fa1ceab3a9c3d3247946bb31afd1760ad588e9b976af73b1b257947719b1db9dfc67c05e8acfb42992f479bda27dd076c7968c3912a16e565da0e589050c9aed6baece6e6d7b9"}, 0x10a)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &