Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. 2020/11/07 11:48:17 fuzzer started 2020/11/07 11:48:18 dialing manager at 10.128.0.26:34475 2020/11/07 11:48:21 syscalls: 200 2020/11/07 11:48:21 code coverage: enabled 2020/11/07 11:48:21 comparison tracing: enabled 2020/11/07 11:48:21 extra coverage: enabled 2020/11/07 11:48:21 setuid sandbox: enabled 2020/11/07 11:48:21 namespace sandbox: enabled 2020/11/07 11:48:21 Android sandbox: /sys/fs/selinux/policy does not exist 2020/11/07 11:48:21 fault injection: enabled 2020/11/07 11:48:21 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/11/07 11:48:21 net packet injection: enabled 2020/11/07 11:48:21 net device setup: enabled 2020/11/07 11:48:21 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/11/07 11:48:21 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/11/07 11:48:21 USB emulation: enabled 2020/11/07 11:48:21 hci packet injection: enabled 2020/11/07 11:48:21 wifi device emulation: enabled 11:48:22 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6erspan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000005c0)={0x3, &(0x7f0000000400)=[{}, {@none}, {@fixed}]}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r6, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:22 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) r6 = accept$inet(r5, 0x0, &(0x7f0000000700)) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000740)={{0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 'lblc\x00', 0x1, 0x702c, 0x36}, {@private=0xa010100, 0x4e22, 0x2, 0xfffffffd, 0x7, 0xac8b5250}}, 0x44) epoll_create(0x4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) 11:48:22 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) r8 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x1409, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x200008a0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x81}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7fff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8001}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048004}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:23 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) r5 = socket(0x9, 0x3, 0x7eb2) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x810) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x488c4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000700)={{0x2, 0x4e21, @empty}, {0x6}, 0x40, {0x2, 0x4e22, @broadcast}, 'wg1\x00'}) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x1407, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x80) 11:48:23 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0xd5735f71a7132b0b, 'pids'}, {0x2d, 'io'}]}, 0x22) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x26048000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x917}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x53a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x20004004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x64, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xea}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @empty}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x51}, 0x1) 11:48:23 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) sendmsg$tipc(r6, &(0x7f0000000d00)={&(0x7f0000000a80)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cb287d858cba081e69bd51b07bced3cadc84c538707f35f32a45fa334ae4e585204760c9881d950efb27431e1458dcf9da12f4366f42a90ea4ac651f1f50c900ff4745f68bb78ed364e2803fbc6f8cc134794d0c4d0a7c188e8c6883d981d2e3124c06e77c939525db57ea4b0360db0dbdde80e7472987bbf2dd3aaa3e17fefef486ab4302ff5106d10639c57110ab2caeea81e8a565599f5c0c7ee9cb6da882f3a692168d77aa36b7f4b915c39333c7dcd4120e596d32073d694a9462dea757d5d1762ac038fc482013876661136c02aa219f9496ce9427265db1107cdf3f06c21e0e2d7f45f32d80b182", 0xeb}, {&(0x7f0000000bc0)="02b8890fb73b98c518d2295f8013f15c5747d65eb9077db15cbe54f2e461fd7c549edc3687b217b3f9a61faa28bed9849ec2d3a51fa1a0aac84bd1aa9a18a7b467cc1cb002f0870a0e0650f089c1b66a5212d78716a31ea93378c329a58882", 0x5f}], 0x2, &(0x7f0000000c80)="77188de92b7f34c02d4d549c6580539894983638b459e7182a36d3d31dc6b025ed89a5683a8c19f7cf0d03d405c7f38f4d8ef9d402ca137452bc235e4e424c4f510f32b1faa22de21955c90cf192db61c05a3134feec79fcfcc8841190ad1c76b613c2ff6d00640a9e80723bee511f5098d6", 0x72, 0x4000}, 0x4840) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000d40)='tls\x00', 0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffb96}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x84081) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000e80), 0x4) epoll_pwait(r5, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) syzkaller login: [ 68.465025][ T8506] IPVS: ftp: loaded support on port[0] = 21 [ 68.720716][ T8508] IPVS: ftp: loaded support on port[0] = 21 [ 68.776694][ T8506] chnl_net:caif_netlink_parms(): no params data found [ 68.944197][ T8510] IPVS: ftp: loaded support on port[0] = 21 [ 68.976154][ T8506] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.984995][ T8506] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.995064][ T8506] device bridge_slave_0 entered promiscuous mode [ 69.005477][ T8506] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.012722][ T8506] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.020516][ T8506] device bridge_slave_1 entered promiscuous mode [ 69.053799][ T8506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.072789][ T8506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.130109][ T8506] team0: Port device team_slave_0 added [ 69.219550][ T8506] team0: Port device team_slave_1 added [ 69.251703][ T8512] IPVS: ftp: loaded support on port[0] = 21 [ 69.295942][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.303665][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.330435][ T8506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.354633][ T8506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.361591][ T8506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.398884][ T8506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.411271][ T8508] chnl_net:caif_netlink_parms(): no params data found [ 69.460395][ T8514] IPVS: ftp: loaded support on port[0] = 21 [ 69.570914][ T8506] device hsr_slave_0 entered promiscuous mode [ 69.587063][ T8506] device hsr_slave_1 entered promiscuous mode [ 69.689204][ T8524] IPVS: ftp: loaded support on port[0] = 21 [ 69.867291][ T8510] chnl_net:caif_netlink_parms(): no params data found [ 69.877236][ T8512] chnl_net:caif_netlink_parms(): no params data found [ 69.940123][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.949812][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.959254][ T8508] device bridge_slave_0 entered promiscuous mode [ 70.001667][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.009069][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.018102][ T8508] device bridge_slave_1 entered promiscuous mode [ 70.102326][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.184865][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.298906][ T8514] chnl_net:caif_netlink_parms(): no params data found [ 70.311083][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.320899][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.329561][ T8512] device bridge_slave_0 entered promiscuous mode [ 70.349086][ T8508] team0: Port device team_slave_0 added [ 70.376554][ T8510] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.387856][ T8510] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.396419][ T8510] device bridge_slave_0 entered promiscuous mode [ 70.418102][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.425516][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.434221][ T8512] device bridge_slave_1 entered promiscuous mode [ 70.441260][ T8506] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.460455][ T8508] team0: Port device team_slave_1 added [ 70.466886][ T3126] Bluetooth: hci0: command 0x0409 tx timeout [ 70.475254][ T8510] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.482825][ T8510] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.491388][ T8510] device bridge_slave_1 entered promiscuous mode [ 70.522110][ T8510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.531930][ T8506] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.549179][ T8506] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.565935][ T8524] chnl_net:caif_netlink_parms(): no params data found [ 70.594324][ T8510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.617657][ T8506] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.645457][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.653295][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.680668][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.699342][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.712349][ T17] Bluetooth: hci1: command 0x0409 tx timeout [ 70.714385][ T8510] team0: Port device team_slave_0 added [ 70.738583][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.745760][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.775290][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.789131][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.816418][ T8510] team0: Port device team_slave_1 added [ 70.844203][ T8512] team0: Port device team_slave_0 added [ 70.881028][ T8512] team0: Port device team_slave_1 added [ 70.927878][ T8508] device hsr_slave_0 entered promiscuous mode [ 70.935650][ T8508] device hsr_slave_1 entered promiscuous mode [ 70.942850][ T8508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.950637][ T8508] Cannot create hsr debugfs directory [ 70.956401][ T9463] Bluetooth: hci2: command 0x0409 tx timeout [ 70.970527][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.981986][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.989662][ T8514] device bridge_slave_0 entered promiscuous mode [ 70.998384][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.007677][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.038869][ T8510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.056645][ T8510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.063696][ T8510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.091360][ T8510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.124906][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.132685][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.140362][ T8514] device bridge_slave_1 entered promiscuous mode [ 71.148469][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.156212][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.182912][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.191938][ T17] Bluetooth: hci3: command 0x0409 tx timeout [ 71.238441][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.246092][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.274143][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.289379][ T8510] device hsr_slave_0 entered promiscuous mode [ 71.297533][ T8510] device hsr_slave_1 entered promiscuous mode [ 71.305492][ T8510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.313423][ T8510] Cannot create hsr debugfs directory [ 71.371453][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.378647][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.388191][ T8524] device bridge_slave_0 entered promiscuous mode [ 71.397783][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.417784][ T8512] device hsr_slave_0 entered promiscuous mode [ 71.424012][ T17] Bluetooth: hci4: command 0x0409 tx timeout [ 71.432537][ T8512] device hsr_slave_1 entered promiscuous mode [ 71.439458][ T8512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.447620][ T8512] Cannot create hsr debugfs directory [ 71.460549][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.469825][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.478662][ T8524] device bridge_slave_1 entered promiscuous mode [ 71.487584][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.582177][ T17] Bluetooth: hci5: command 0x0409 tx timeout [ 71.593404][ T8514] team0: Port device team_slave_0 added [ 71.621560][ T8524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.636302][ T8514] team0: Port device team_slave_1 added [ 71.672964][ T8524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.738295][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.746036][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.772047][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.827879][ T8524] team0: Port device team_slave_0 added [ 71.834577][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.841531][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.868202][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.887436][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.901183][ T8524] team0: Port device team_slave_1 added [ 71.978216][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.996705][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.023488][ T8514] device hsr_slave_0 entered promiscuous mode [ 72.035884][ T8514] device hsr_slave_1 entered promiscuous mode [ 72.043397][ T8514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.050953][ T8514] Cannot create hsr debugfs directory [ 72.071409][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.083317][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.115074][ T8524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.129967][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.160506][ T8508] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.169571][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.176867][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.203146][ T8524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.229263][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.237908][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.247480][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.254786][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.271650][ T8508] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.285284][ T8508] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.299706][ T8508] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.320040][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.329999][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.339126][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.348264][ T9463] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.355391][ T9463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.365177][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.434880][ T8524] device hsr_slave_0 entered promiscuous mode [ 72.443345][ T8524] device hsr_slave_1 entered promiscuous mode [ 72.450107][ T8524] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.458950][ T8524] Cannot create hsr debugfs directory [ 72.465877][ T8510] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.477073][ T8510] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.486161][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.495669][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.504664][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.542248][ T8201] Bluetooth: hci0: command 0x041b tx timeout [ 72.544021][ T8510] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.563408][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.571217][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.581417][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.592929][ T8510] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.672642][ T8512] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.688050][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.697124][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.707586][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.716276][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.750610][ T8512] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.761823][ T8506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.782817][ T8204] Bluetooth: hci1: command 0x041b tx timeout [ 72.811105][ T8512] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.853324][ T8512] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.964605][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.977648][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.021950][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 73.058658][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.077384][ T8514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.107796][ T8524] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 73.121083][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.139816][ T8514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.154007][ T8524] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 73.170274][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.177524][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.186834][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.205121][ T8514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.218110][ T8524] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 73.232627][ T8524] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 73.262104][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.270698][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.282039][ T8514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.288944][ T8204] Bluetooth: hci3: command 0x041b tx timeout [ 73.301791][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.310209][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.323559][ T3126] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.330593][ T3126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.356022][ T8510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.384331][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.393678][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.402852][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.411153][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.418283][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.464409][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.473212][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.481402][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.498365][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.509497][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.521151][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.530994][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.553009][ T9463] Bluetooth: hci4: command 0x041b tx timeout [ 73.559143][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.568532][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.578620][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.588483][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.596877][ T8506] device veth0_vlan entered promiscuous mode [ 73.613579][ T8510] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.630723][ T8506] device veth1_vlan entered promiscuous mode [ 73.641397][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.651434][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.660169][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.669194][ T3126] Bluetooth: hci5: command 0x041b tx timeout [ 73.735108][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.743546][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.751518][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.766972][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.775924][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.789191][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.797715][ T9463] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.804843][ T9463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.812877][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.821122][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.829936][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.838705][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.847222][ T9463] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.854354][ T9463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.862081][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.876992][ T8508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.911345][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.920045][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.930329][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.939973][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.964293][ T8506] device veth0_macvtap entered promiscuous mode [ 73.989358][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.997396][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.006766][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.015480][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.024437][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.033599][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.041047][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.051055][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.075826][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.091292][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.137063][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.145915][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.155572][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.164774][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.173464][ T8204] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.180491][ T8204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.188427][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.197234][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.205649][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.214469][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.223444][ T8204] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.230540][ T8204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.238254][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.246799][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.255892][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.265691][ T8506] device veth1_macvtap entered promiscuous mode [ 74.295260][ T8510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.307410][ T8201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.328388][ T8524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.362785][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.376154][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.386456][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.399323][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.409160][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.421470][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.431099][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.455016][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.476280][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.484764][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.493987][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.503731][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.513877][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.529991][ T8524] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.546452][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.560784][ T8512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.593964][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.612149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.619967][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.637590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.657441][ T7] Bluetooth: hci0: command 0x040f tx timeout [ 74.665742][ T8506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.693050][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.703446][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.712475][ T3126] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.719583][ T3126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.727684][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.736813][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.745693][ T3126] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.752806][ T3126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.760355][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.769482][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.780127][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.789103][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.797431][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.822635][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.831253][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.842022][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.849399][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.859908][ T8506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.870569][ T3126] Bluetooth: hci1: command 0x040f tx timeout [ 74.876756][ T8506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.885543][ T8506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.896119][ T8506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.913429][ T8514] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.962898][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.974381][ T8201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.984406][ T8201] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.992998][ T8201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.001481][ T8201] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.011321][ T8201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.020264][ T8201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.029999][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.037161][ T8201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.045822][ T8201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.054655][ T8201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.067989][ T8510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.081988][ T8508] device veth0_vlan entered promiscuous mode [ 75.103402][ T5] Bluetooth: hci2: command 0x040f tx timeout [ 75.110545][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.119478][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.129087][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.137717][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.146428][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.156020][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.171816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.180164][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.190360][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.199121][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.225160][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.234072][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.243876][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.250916][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.259308][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.292721][ T8508] device veth1_vlan entered promiscuous mode [ 75.302643][ T8524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.321891][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.330612][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.342127][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.343526][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 75.351120][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.367072][ T3126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.493533][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.503848][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.515498][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.525983][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.535679][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.545418][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.557717][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.566905][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.575570][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.584788][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.593288][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.618139][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.626471][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.635092][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.644852][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.655998][ T8512] device veth0_vlan entered promiscuous mode [ 75.663424][ T9463] Bluetooth: hci4: command 0x040f tx timeout [ 75.676520][ T8514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.694750][ T8524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.713404][ T8512] device veth1_vlan entered promiscuous mode [ 75.720312][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.729493][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.743108][ T17] Bluetooth: hci5: command 0x040f tx timeout [ 75.744964][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.765503][ T8510] device veth0_vlan entered promiscuous mode [ 75.769306][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.780221][ T8510] device veth1_vlan entered promiscuous mode [ 75.782264][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.820230][ T8508] device veth0_macvtap entered promiscuous mode [ 75.880008][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.897906][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.908064][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.916635][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.925440][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.933588][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.942400][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.976490][ T8508] device veth1_macvtap entered promiscuous mode [ 75.992632][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.000775][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.011363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.032906][ T8514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.064965][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.067219][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.074499][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.090468][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.101689][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.109147][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.119789][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.128694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.143292][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.155407][ T8510] device veth0_macvtap entered promiscuous mode [ 76.165081][ T8512] device veth0_macvtap entered promiscuous mode [ 76.187498][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.200314][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.220071][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.256350][ T8510] device veth1_macvtap entered promiscuous mode [ 76.276272][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.290366][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.315479][ T8508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 76.330583][ T8508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.343791][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.363612][ T8512] device veth1_macvtap entered promiscuous mode [ 76.398375][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.417999][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.427402][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.437131][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 11:48:31 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6erspan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000005c0)={0x3, &(0x7f0000000400)=[{}, {@none}, {@fixed}]}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r6, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) [ 76.476026][ T8508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.492777][ T8508] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.531500][ T8508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.540223][ T8508] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.583937][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.602831][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.611112][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.627817][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.649724][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.671734][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.683521][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.699039][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.710463][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 76.718266][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.727627][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.739260][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.749498][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.760130][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.770017][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 76.781397][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.793787][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.804519][ T8524] device veth0_vlan entered promiscuous mode [ 76.811333][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 76.822044][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.832656][ T8510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 76.843940][ T8510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.856750][ T8510] batman_adv: batadv0: Interface activated: batadv_slave_1 11:48:32 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6erspan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000005c0)={0x3, &(0x7f0000000400)=[{}, {@none}, {@fixed}]}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r6, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) [ 76.881814][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.890486][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.904232][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.914475][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.924343][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.934053][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.944633][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.959254][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.977712][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 76.990452][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 76.996634][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.007821][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 77.018951][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.030314][ T8512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 77.044222][ T8512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.057159][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.090860][ T8510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.113622][ T8510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.131612][ T8510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 11:48:32 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6erspan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000005c0)={0x3, &(0x7f0000000400)=[{}, {@none}, {@fixed}]}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r6, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) [ 77.140352][ T8510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.153173][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.165840][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.202437][ T7] Bluetooth: hci2: command 0x0419 tx timeout [ 77.224381][ T8512] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.246748][ T8512] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.279058][ T8512] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.297099][ T8512] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.324807][ T8524] device veth1_vlan entered promiscuous mode 11:48:32 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6erspan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000005c0)={0x3, &(0x7f0000000400)=[{}, {@none}, {@fixed}]}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) [ 77.414937][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.439953][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.467490][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 77.485734][ T8514] device veth0_vlan entered promiscuous mode [ 77.520903][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.543951][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.599051][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.599095][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.617568][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.618268][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.618723][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.702232][ T8524] device veth0_macvtap entered promiscuous mode [ 77.741737][ T8204] Bluetooth: hci4: command 0x0419 tx timeout 11:48:32 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6erspan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000005c0)={0x3, &(0x7f0000000400)=[{}, {@none}, {@fixed}]}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) [ 77.750055][ T8524] device veth1_macvtap entered promiscuous mode [ 77.760751][ T8514] device veth1_vlan entered promiscuous mode [ 77.822490][ T9463] Bluetooth: hci5: command 0x0419 tx timeout [ 77.874817][ T289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.904441][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 77.918512][ T289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.947984][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.991147][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.016147][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.030211][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.041526][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.052004][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.063823][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.076284][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.098087][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.108588][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.118736][ T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.118779][ T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.124542][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.146898][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.151507][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.174502][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.189959][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.200909][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.216073][ T8524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 78.227709][ T8524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.243557][ T8524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.250946][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 78.260658][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 78.268893][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.277118][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.286584][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.294850][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 78.304521][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 78.313569][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.321574][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.329277][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 78.338203][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.383833][ T8524] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 11:48:33 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6erspan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000005c0)={0x3, &(0x7f0000000400)=[{}, {@none}, {@fixed}]}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x0, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) [ 78.427198][ T8524] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.438835][ T8524] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.471387][ T8524] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.524512][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 78.536892][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 11:48:33 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) r6 = accept$inet(r5, 0x0, &(0x7f0000000700)) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000740)={{0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 'lblc\x00', 0x1, 0x702c, 0x36}, {@private=0xa010100, 0x4e22, 0x2, 0xfffffffd, 0x7, 0xac8b5250}}, 0x44) epoll_create(0x4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) [ 78.578033][ T8514] device veth0_macvtap entered promiscuous mode [ 78.634183][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.647928][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.665716][ T8514] device veth1_macvtap entered promiscuous mode 11:48:33 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6erspan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000005c0)={0x3, &(0x7f0000000400)=[{}, {@none}, {@fixed}]}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) [ 78.690217][ T289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.705230][ T289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.733275][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 78.748173][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 78.777983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.807116][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.925119][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 78.953542][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.978490][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.029586][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.061191][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.074710][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.090368][ T9959] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 79.101801][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.121593][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 11:48:34 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) r6 = accept$inet(r5, 0x0, &(0x7f0000000700)) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000740)={{0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 'lblc\x00', 0x1, 0x702c, 0x36}, {@private=0xa010100, 0x4e22, 0x2, 0xfffffffd, 0x7, 0xac8b5250}}, 0x44) epoll_create(0x4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) 11:48:34 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6erspan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000005c0)={0x3, &(0x7f0000000400)=[{}, {@none}, {@fixed}]}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) [ 79.155460][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.171361][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.202136][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.216325][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.235126][ T9463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.259717][ T289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.266224][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.291599][ T289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.331682][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.361715][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.383422][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.402859][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.416328][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.427419][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.439753][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.471426][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.487224][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.499697][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.511416][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.519499][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.540193][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.567104][ T8514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.591421][ T8514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.600194][ T8514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.618689][ T8514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.645414][ T289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.671362][ T289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.680077][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.773842][ T293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.784833][ T293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.825086][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.834281][ T289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.851436][ T289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.860809][ T8204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 11:48:35 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) r8 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x1409, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x200008a0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x81}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7fff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8001}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048004}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:35 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) r5 = socket(0x9, 0x3, 0x7eb2) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x810) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x488c4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000700)={{0x2, 0x4e21, @empty}, {0x6}, 0x40, {0x2, 0x4e22, @broadcast}, 'wg1\x00'}) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x1407, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x80) 11:48:35 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) r6 = accept$inet(r5, 0x0, &(0x7f0000000700)) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000740)={{0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 'lblc\x00', 0x1, 0x702c, 0x36}, {@private=0xa010100, 0x4e22, 0x2, 0xfffffffd, 0x7, 0xac8b5250}}, 0x44) epoll_create(0x4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000840)={'wlan1\x00'}) 11:48:35 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6erspan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f00000005c0)={0x3, &(0x7f0000000400)=[{}, {@none}, {@fixed}]}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:35 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) sendmsg$tipc(r6, &(0x7f0000000d00)={&(0x7f0000000a80)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cb287d858cba081e69bd51b07bced3cadc84c538707f35f32a45fa334ae4e585204760c9881d950efb27431e1458dcf9da12f4366f42a90ea4ac651f1f50c900ff4745f68bb78ed364e2803fbc6f8cc134794d0c4d0a7c188e8c6883d981d2e3124c06e77c939525db57ea4b0360db0dbdde80e7472987bbf2dd3aaa3e17fefef486ab4302ff5106d10639c57110ab2caeea81e8a565599f5c0c7ee9cb6da882f3a692168d77aa36b7f4b915c39333c7dcd4120e596d32073d694a9462dea757d5d1762ac038fc482013876661136c02aa219f9496ce9427265db1107cdf3f06c21e0e2d7f45f32d80b182", 0xeb}, {&(0x7f0000000bc0)="02b8890fb73b98c518d2295f8013f15c5747d65eb9077db15cbe54f2e461fd7c549edc3687b217b3f9a61faa28bed9849ec2d3a51fa1a0aac84bd1aa9a18a7b467cc1cb002f0870a0e0650f089c1b66a5212d78716a31ea93378c329a58882", 0x5f}], 0x2, &(0x7f0000000c80)="77188de92b7f34c02d4d549c6580539894983638b459e7182a36d3d31dc6b025ed89a5683a8c19f7cf0d03d405c7f38f4d8ef9d402ca137452bc235e4e424c4f510f32b1faa22de21955c90cf192db61c05a3134feec79fcfcc8841190ad1c76b613c2ff6d00640a9e80723bee511f5098d6", 0x72, 0x4000}, 0x4840) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000d40)='tls\x00', 0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffb96}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x84081) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000e80), 0x4) epoll_pwait(r5, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:35 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0xd5735f71a7132b0b, 'pids'}, {0x2d, 'io'}]}, 0x22) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x26048000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x917}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x53a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x20004004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x64, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xea}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @empty}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x51}, 0x1) [ 80.322984][T10025] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:35 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6erspan0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r6, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:35 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) r6 = accept$inet(r5, 0x0, &(0x7f0000000700)) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000740)={{0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 'lblc\x00', 0x1, 0x702c, 0x36}, {@private=0xa010100, 0x4e22, 0x2, 0xfffffffd, 0x7, 0xac8b5250}}, 0x44) epoll_create(0x4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:35 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) r5 = socket(0x9, 0x3, 0x7eb2) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x810) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x488c4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000700)={{0x2, 0x4e21, @empty}, {0x6}, 0x40, {0x2, 0x4e22, @broadcast}, 'wg1\x00'}) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x1407, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x80) 11:48:35 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) r8 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x1409, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x200008a0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x81}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7fff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8001}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048004}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:35 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) sendmsg$tipc(r6, &(0x7f0000000d00)={&(0x7f0000000a80)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cb287d858cba081e69bd51b07bced3cadc84c538707f35f32a45fa334ae4e585204760c9881d950efb27431e1458dcf9da12f4366f42a90ea4ac651f1f50c900ff4745f68bb78ed364e2803fbc6f8cc134794d0c4d0a7c188e8c6883d981d2e3124c06e77c939525db57ea4b0360db0dbdde80e7472987bbf2dd3aaa3e17fefef486ab4302ff5106d10639c57110ab2caeea81e8a565599f5c0c7ee9cb6da882f3a692168d77aa36b7f4b915c39333c7dcd4120e596d32073d694a9462dea757d5d1762ac038fc482013876661136c02aa219f9496ce9427265db1107cdf3f06c21e0e2d7f45f32d80b182", 0xeb}, {&(0x7f0000000bc0)="02b8890fb73b98c518d2295f8013f15c5747d65eb9077db15cbe54f2e461fd7c549edc3687b217b3f9a61faa28bed9849ec2d3a51fa1a0aac84bd1aa9a18a7b467cc1cb002f0870a0e0650f089c1b66a5212d78716a31ea93378c329a58882", 0x5f}], 0x2, &(0x7f0000000c80)="77188de92b7f34c02d4d549c6580539894983638b459e7182a36d3d31dc6b025ed89a5683a8c19f7cf0d03d405c7f38f4d8ef9d402ca137452bc235e4e424c4f510f32b1faa22de21955c90cf192db61c05a3134feec79fcfcc8841190ad1c76b613c2ff6d00640a9e80723bee511f5098d6", 0x72, 0x4000}, 0x4840) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000d40)='tls\x00', 0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffb96}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x84081) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000e80), 0x4) epoll_pwait(r5, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:35 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0xd5735f71a7132b0b, 'pids'}, {0x2d, 'io'}]}, 0x22) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x26048000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x917}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x53a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x20004004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x64, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xea}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @empty}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x51}, 0x1) 11:48:35 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) r6 = accept$inet(r5, 0x0, &(0x7f0000000700)) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000740)={{0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 'lblc\x00', 0x1, 0x702c, 0x36}, {@private=0xa010100, 0x4e22, 0x2, 0xfffffffd, 0x7, 0xac8b5250}}, 0x44) epoll_create(0x4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:35 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000003c0)={'ip6erspan0\x00'}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r6, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:35 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) r5 = socket(0x9, 0x3, 0x7eb2) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x810) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x488c4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000700)={{0x2, 0x4e21, @empty}, {0x6}, 0x40, {0x2, 0x4e22, @broadcast}, 'wg1\x00'}) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x38, 0x1407, 0x8, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4804}, 0x80) [ 80.669798][T10044] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:35 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) r8 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x1409, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x200008a0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x81}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7fff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8001}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048004}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:35 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) openat$tun(0xffffffffffffff9c, &(0x7f0000000380)='/dev/net/tun\x00', 0x80040, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:36 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) sendmsg$tipc(r6, &(0x7f0000000d00)={&(0x7f0000000a80)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cb287d858cba081e69bd51b07bced3cadc84c538707f35f32a45fa334ae4e585204760c9881d950efb27431e1458dcf9da12f4366f42a90ea4ac651f1f50c900ff4745f68bb78ed364e2803fbc6f8cc134794d0c4d0a7c188e8c6883d981d2e3124c06e77c939525db57ea4b0360db0dbdde80e7472987bbf2dd3aaa3e17fefef486ab4302ff5106d10639c57110ab2caeea81e8a565599f5c0c7ee9cb6da882f3a692168d77aa36b7f4b915c39333c7dcd4120e596d32073d694a9462dea757d5d1762ac038fc482013876661136c02aa219f9496ce9427265db1107cdf3f06c21e0e2d7f45f32d80b182", 0xeb}, {&(0x7f0000000bc0)="02b8890fb73b98c518d2295f8013f15c5747d65eb9077db15cbe54f2e461fd7c549edc3687b217b3f9a61faa28bed9849ec2d3a51fa1a0aac84bd1aa9a18a7b467cc1cb002f0870a0e0650f089c1b66a5212d78716a31ea93378c329a58882", 0x5f}], 0x2, &(0x7f0000000c80)="77188de92b7f34c02d4d549c6580539894983638b459e7182a36d3d31dc6b025ed89a5683a8c19f7cf0d03d405c7f38f4d8ef9d402ca137452bc235e4e424c4f510f32b1faa22de21955c90cf192db61c05a3134feec79fcfcc8841190ad1c76b613c2ff6d00640a9e80723bee511f5098d6", 0x72, 0x4000}, 0x4840) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000d40)='tls\x00', 0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffb96}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x84081) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000e80), 0x4) epoll_pwait(r5, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:36 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) r5 = socket(0x9, 0x3, 0x7eb2) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x810) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x488c4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000700)={{0x2, 0x4e21, @empty}, {0x6}, 0x40, {0x2, 0x4e22, @broadcast}, 'wg1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:36 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0xd5735f71a7132b0b, 'pids'}, {0x2d, 'io'}]}, 0x22) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x26048000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x917}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x53a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x20004004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x64, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xea}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={[], [], @empty}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan0\x00'}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x51}, 0x1) 11:48:36 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) r6 = accept$inet(r5, 0x0, &(0x7f0000000700)) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000740)={{0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x2, 'lblc\x00', 0x1, 0x702c, 0x36}, {@private=0xa010100, 0x4e22, 0x2, 0xfffffffd, 0x7, 0xac8b5250}}, 0x44) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) [ 80.958289][T10063] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:36 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000340)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:36 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) r5 = socket(0x9, 0x3, 0x7eb2) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x810) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x488c4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000700)={{0x2, 0x4e21, @empty}, {0x6}, 0x40, {0x2, 0x4e22, @broadcast}, 'wg1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:36 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) r8 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x1409, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x200008a0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x81}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7fff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8001}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048004}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:36 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) sendmsg$tipc(r6, &(0x7f0000000d00)={&(0x7f0000000a80)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cb287d858cba081e69bd51b07bced3cadc84c538707f35f32a45fa334ae4e585204760c9881d950efb27431e1458dcf9da12f4366f42a90ea4ac651f1f50c900ff4745f68bb78ed364e2803fbc6f8cc134794d0c4d0a7c188e8c6883d981d2e3124c06e77c939525db57ea4b0360db0dbdde80e7472987bbf2dd3aaa3e17fefef486ab4302ff5106d10639c57110ab2caeea81e8a565599f5c0c7ee9cb6da882f3a692168d77aa36b7f4b915c39333c7dcd4120e596d32073d694a9462dea757d5d1762ac038fc482013876661136c02aa219f9496ce9427265db1107cdf3f06c21e0e2d7f45f32d80b182", 0xeb}, {&(0x7f0000000bc0)="02b8890fb73b98c518d2295f8013f15c5747d65eb9077db15cbe54f2e461fd7c549edc3687b217b3f9a61faa28bed9849ec2d3a51fa1a0aac84bd1aa9a18a7b467cc1cb002f0870a0e0650f089c1b66a5212d78716a31ea93378c329a58882", 0x5f}], 0x2, &(0x7f0000000c80)="77188de92b7f34c02d4d549c6580539894983638b459e7182a36d3d31dc6b025ed89a5683a8c19f7cf0d03d405c7f38f4d8ef9d402ca137452bc235e4e424c4f510f32b1faa22de21955c90cf192db61c05a3134feec79fcfcc8841190ad1c76b613c2ff6d00640a9e80723bee511f5098d6", 0x72, 0x4000}, 0x4840) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000d40)='tls\x00', 0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffb96}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x84081) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000e80), 0x4) socket(0x1c, 0x1, 0x6) 11:48:36 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) accept$inet(r5, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:36 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0xd5735f71a7132b0b, 'pids'}, {0x2d, 'io'}]}, 0x22) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x26048000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x917}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x53a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x20004004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f00000010c0)='l2tp\x00') 11:48:36 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000300)) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) [ 81.199246][T10084] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:36 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) r5 = socket(0x9, 0x3, 0x7eb2) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x810) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x488c4) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000700)={{0x2, 0x4e21, @empty}, {0x6}, 0x40, {0x2, 0x4e22, @broadcast}, 'wg1\x00'}) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:36 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) r8 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x1409, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x200008a0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x81}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7fff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8001}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048004}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:36 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) sendmsg$tipc(r6, &(0x7f0000000d00)={&(0x7f0000000a80)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cb287d858cba081e69bd51b07bced3cadc84c538707f35f32a45fa334ae4e585204760c9881d950efb27431e1458dcf9da12f4366f42a90ea4ac651f1f50c900ff4745f68bb78ed364e2803fbc6f8cc134794d0c4d0a7c188e8c6883d981d2e3124c06e77c939525db57ea4b0360db0dbdde80e7472987bbf2dd3aaa3e17fefef486ab4302ff5106d10639c57110ab2caeea81e8a565599f5c0c7ee9cb6da882f3a692168d77aa36b7f4b915c39333c7dcd4120e596d32073d694a9462dea757d5d1762ac038fc482013876661136c02aa219f9496ce9427265db1107cdf3f06c21e0e2d7f45f32d80b182", 0xeb}, {&(0x7f0000000bc0)="02b8890fb73b98c518d2295f8013f15c5747d65eb9077db15cbe54f2e461fd7c549edc3687b217b3f9a61faa28bed9849ec2d3a51fa1a0aac84bd1aa9a18a7b467cc1cb002f0870a0e0650f089c1b66a5212d78716a31ea93378c329a58882", 0x5f}], 0x2, &(0x7f0000000c80)="77188de92b7f34c02d4d549c6580539894983638b459e7182a36d3d31dc6b025ed89a5683a8c19f7cf0d03d405c7f38f4d8ef9d402ca137452bc235e4e424c4f510f32b1faa22de21955c90cf192db61c05a3134feec79fcfcc8841190ad1c76b613c2ff6d00640a9e80723bee511f5098d6", 0x72, 0x4000}, 0x4840) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000d40)='tls\x00', 0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffb96}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x84081) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000e80), 0x4) socket(0x1c, 0x1, 0x6) 11:48:36 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) accept$inet(r5, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:36 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000002c0)={0x1}, 0x8) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:36 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) r5 = socket(0x9, 0x3, 0x7eb2) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x810) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x488c4) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') [ 81.452431][T10100] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:36 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) r8 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x1409, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x200008a0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x81}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7fff}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x8001}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048004}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:36 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0xd5735f71a7132b0b, 'pids'}, {0x2d, 'io'}]}, 0x22) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x26048000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x917}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x53a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x20004004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'wlan0\x00'}) 11:48:36 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) accept$inet(r5, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:36 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) sendmsg$tipc(r6, &(0x7f0000000d00)={&(0x7f0000000a80)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cb287d858cba081e69bd51b07bced3cadc84c538707f35f32a45fa334ae4e585204760c9881d950efb27431e1458dcf9da12f4366f42a90ea4ac651f1f50c900ff4745f68bb78ed364e2803fbc6f8cc134794d0c4d0a7c188e8c6883d981d2e3124c06e77c939525db57ea4b0360db0dbdde80e7472987bbf2dd3aaa3e17fefef486ab4302ff5106d10639c57110ab2caeea81e8a565599f5c0c7ee9cb6da882f3a692168d77aa36b7f4b915c39333c7dcd4120e596d32073d694a9462dea757d5d1762ac038fc482013876661136c02aa219f9496ce9427265db1107cdf3f06c21e0e2d7f45f32d80b182", 0xeb}, {&(0x7f0000000bc0)="02b8890fb73b98c518d2295f8013f15c5747d65eb9077db15cbe54f2e461fd7c549edc3687b217b3f9a61faa28bed9849ec2d3a51fa1a0aac84bd1aa9a18a7b467cc1cb002f0870a0e0650f089c1b66a5212d78716a31ea93378c329a58882", 0x5f}], 0x2, &(0x7f0000000c80)="77188de92b7f34c02d4d549c6580539894983638b459e7182a36d3d31dc6b025ed89a5683a8c19f7cf0d03d405c7f38f4d8ef9d402ca137452bc235e4e424c4f510f32b1faa22de21955c90cf192db61c05a3134feec79fcfcc8841190ad1c76b613c2ff6d00640a9e80723bee511f5098d6", 0x72, 0x4000}, 0x4840) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000d40)='tls\x00', 0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffb96}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x84081) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000e80), 0x4) socket(0x1c, 0x1, 0x6) 11:48:36 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20e001, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:36 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) r5 = socket(0x9, 0x3, 0x7eb2) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x810) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') [ 81.671668][T10114] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:36 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x7c}}, 0x41) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:36 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:36 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) r8 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x1409, 0x400, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x200008a0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:36 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0xd5735f71a7132b0b, 'pids'}, {0x2d, 'io'}]}, 0x22) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x26048000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x40, r2, 0x20, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x917}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x53a}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x20004004) 11:48:37 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) sendmsg$tipc(r6, &(0x7f0000000d00)={&(0x7f0000000a80)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cb287d858cba081e69bd51b07bced3cadc84c538707f35f32a45fa334ae4e585204760c9881d950efb27431e1458dcf9da12f4366f42a90ea4ac651f1f50c900ff4745f68bb78ed364e2803fbc6f8cc134794d0c4d0a7c188e8c6883d981d2e3124c06e77c939525db57ea4b0360db0dbdde80e7472987bbf2dd3aaa3e17fefef486ab4302ff5106d10639c57110ab2caeea81e8a565599f5c0c7ee9cb6da882f3a692168d77aa36b7f4b915c39333c7dcd4120e596d32073d694a9462dea757d5d1762ac038fc482013876661136c02aa219f9496ce9427265db1107cdf3f06c21e0e2d7f45f32d80b182", 0xeb}, {&(0x7f0000000bc0)="02b8890fb73b98c518d2295f8013f15c5747d65eb9077db15cbe54f2e461fd7c549edc3687b217b3f9a61faa28bed9849ec2d3a51fa1a0aac84bd1aa9a18a7b467cc1cb002f0870a0e0650f089c1b66a5212d78716a31ea93378c329a58882", 0x5f}], 0x2, &(0x7f0000000c80)="77188de92b7f34c02d4d549c6580539894983638b459e7182a36d3d31dc6b025ed89a5683a8c19f7cf0d03d405c7f38f4d8ef9d402ca137452bc235e4e424c4f510f32b1faa22de21955c90cf192db61c05a3134feec79fcfcc8841190ad1c76b613c2ff6d00640a9e80723bee511f5098d6", 0x72, 0x4000}, 0x4840) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000d40)='tls\x00', 0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffb96}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x84081) epoll_pwait(r5, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:37 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) r5 = socket(0x9, 0x3, 0x7eb2) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x810) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:37 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0xd5735f71a7132b0b, 'pids'}, {0x2d, 'io'}]}, 0x22) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, 0x1412, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x26048000) [ 81.954506][T10139] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:37 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:37 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:37 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:37 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) sendmsg$tipc(r6, &(0x7f0000000d00)={&(0x7f0000000a80)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cb287d858cba081e69bd51b07bced3cadc84c538707f35f32a45fa334ae4e585204760c9881d950efb27431e1458dcf9da12f4366f42a90ea4ac651f1f50c900ff4745f68bb78ed364e2803fbc6f8cc134794d0c4d0a7c188e8c6883d981d2e3124c06e77c939525db57ea4b0360db0dbdde80e7472987bbf2dd3aaa3e17fefef486ab4302ff5106d10639c57110ab2caeea81e8a565599f5c0c7ee9cb6da882f3a692168d77aa36b7f4b915c39333c7dcd4120e596d32073d694a9462dea757d5d1762ac038fc482013876661136c02aa219f9496ce9427265db1107cdf3f06c21e0e2d7f45f32d80b182", 0xeb}, {&(0x7f0000000bc0)="02b8890fb73b98c518d2295f8013f15c5747d65eb9077db15cbe54f2e461fd7c549edc3687b217b3f9a61faa28bed9849ec2d3a51fa1a0aac84bd1aa9a18a7b467cc1cb002f0870a0e0650f089c1b66a5212d78716a31ea93378c329a58882", 0x5f}], 0x2, &(0x7f0000000c80)="77188de92b7f34c02d4d549c6580539894983638b459e7182a36d3d31dc6b025ed89a5683a8c19f7cf0d03d405c7f38f4d8ef9d402ca137452bc235e4e424c4f510f32b1faa22de21955c90cf192db61c05a3134feec79fcfcc8841190ad1c76b613c2ff6d00640a9e80723bee511f5098d6", 0x72, 0x4000}, 0x4840) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000d40)='tls\x00', 0x4) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x40, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1f}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffb96}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x84081) epoll_pwait(r5, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:37 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) r5 = socket(0x9, 0x3, 0x7eb2) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}}, 0x810) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') [ 82.140848][T10152] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:37 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) connect$vsock_stream(r5, &(0x7f00000006c0)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:37 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r4, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:37 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:37 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0xd5735f71a7132b0b, 'pids'}, {0x2d, 'io'}]}, 0x22) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) 11:48:37 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) sendmsg$tipc(r6, &(0x7f0000000d00)={&(0x7f0000000a80)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cb287d858cba081e69bd51b07bced3cadc84c538707f35f32a45fa334ae4e585204760c9881d950efb27431e1458dcf9da12f4366f42a90ea4ac651f1f50c900ff4745f68bb78ed364e2803fbc6f8cc134794d0c4d0a7c188e8c6883d981d2e3124c06e77c939525db57ea4b0360db0dbdde80e7472987bbf2dd3aaa3e17fefef486ab4302ff5106d10639c57110ab2caeea81e8a565599f5c0c7ee9cb6da882f3a692168d77aa36b7f4b915c39333c7dcd4120e596d32073d694a9462dea757d5d1762ac038fc482013876661136c02aa219f9496ce9427265db1107cdf3f06c21e0e2d7f45f32d80b182", 0xeb}, {&(0x7f0000000bc0)="02b8890fb73b98c518d2295f8013f15c5747d65eb9077db15cbe54f2e461fd7c549edc3687b217b3f9a61faa28bed9849ec2d3a51fa1a0aac84bd1aa9a18a7b467cc1cb002f0870a0e0650f089c1b66a5212d78716a31ea93378c329a58882", 0x5f}], 0x2, &(0x7f0000000c80)="77188de92b7f34c02d4d549c6580539894983638b459e7182a36d3d31dc6b025ed89a5683a8c19f7cf0d03d405c7f38f4d8ef9d402ca137452bc235e4e424c4f510f32b1faa22de21955c90cf192db61c05a3134feec79fcfcc8841190ad1c76b613c2ff6d00640a9e80723bee511f5098d6", 0x72, 0x4000}, 0x4840) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000d40)='tls\x00', 0x4) epoll_pwait(r5, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:37 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) socket(0x9, 0x3, 0x7eb2) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:37 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r3, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) [ 82.430818][T10174] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:37 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r3, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000680)={r2}, 0x8) accept$inet(r5, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:37 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0xd5735f71a7132b0b, 'pids'}, {0x2d, 'io'}]}, 0x22) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000e00)={0x40000000}) 11:48:37 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:37 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) sendmsg$tipc(r6, &(0x7f0000000d00)={&(0x7f0000000a80)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cb287d858cba081e69bd51b07bced3cadc84c538707f35f32a45fa334ae4e585204760c9881d950efb27431e1458dcf9da12f4366f42a90ea4ac651f1f50c900ff4745f68bb78ed364e2803fbc6f8cc134794d0c4d0a7c188e8c6883d981d2e3124c06e77c939525db57ea4b0360db0dbdde80e7472987bbf2dd3aaa3e17fefef486ab4302ff5106d10639c57110ab2caeea81e8a565599f5c0c7ee9cb6da882f3a692168d77aa36b7f4b915c39333c7dcd4120e596d32073d694a9462dea757d5d1762ac038fc482013876661136c02aa219f9496ce9427265db1107cdf3f06c21e0e2d7f45f32d80b182", 0xeb}, {&(0x7f0000000bc0)="02b8890fb73b98c518d2295f8013f15c5747d65eb9077db15cbe54f2e461fd7c549edc3687b217b3f9a61faa28bed9849ec2d3a51fa1a0aac84bd1aa9a18a7b467cc1cb002f0870a0e0650f089c1b66a5212d78716a31ea93378c329a58882", 0x5f}], 0x2, &(0x7f0000000c80)="77188de92b7f34c02d4d549c6580539894983638b459e7182a36d3d31dc6b025ed89a5683a8c19f7cf0d03d405c7f38f4d8ef9d402ca137452bc235e4e424c4f510f32b1faa22de21955c90cf192db61c05a3134feec79fcfcc8841190ad1c76b613c2ff6d00640a9e80723bee511f5098d6", 0x72, 0x4000}, 0x4840) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000d40)='tls\x00', 0x4) epoll_pwait(r5, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:37 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:37 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0xa1f}, 0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r3, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:37 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r2, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000640)={0x9, 0x800, 0x0, 0x4, 0x2}, 0x14) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:37 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:37 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0xd5735f71a7132b0b, 'pids'}, {0x2d, 'io'}]}, 0x22) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000e00)={0x40000000}) 11:48:37 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:37 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) sendmsg$tipc(r6, &(0x7f0000000d00)={&(0x7f0000000a80)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000ac0)="cb287d858cba081e69bd51b07bced3cadc84c538707f35f32a45fa334ae4e585204760c9881d950efb27431e1458dcf9da12f4366f42a90ea4ac651f1f50c900ff4745f68bb78ed364e2803fbc6f8cc134794d0c4d0a7c188e8c6883d981d2e3124c06e77c939525db57ea4b0360db0dbdde80e7472987bbf2dd3aaa3e17fefef486ab4302ff5106d10639c57110ab2caeea81e8a565599f5c0c7ee9cb6da882f3a692168d77aa36b7f4b915c39333c7dcd4120e596d32073d694a9462dea757d5d1762ac038fc482013876661136c02aa219f9496ce9427265db1107cdf3f06c21e0e2d7f45f32d80b182", 0xeb}, {&(0x7f0000000bc0)="02b8890fb73b98c518d2295f8013f15c5747d65eb9077db15cbe54f2e461fd7c549edc3687b217b3f9a61faa28bed9849ec2d3a51fa1a0aac84bd1aa9a18a7b467cc1cb002f0870a0e0650f089c1b66a5212d78716a31ea93378c329a58882", 0x5f}], 0x2, &(0x7f0000000c80)="77188de92b7f34c02d4d549c6580539894983638b459e7182a36d3d31dc6b025ed89a5683a8c19f7cf0d03d405c7f38f4d8ef9d402ca137452bc235e4e424c4f510f32b1faa22de21955c90cf192db61c05a3134feec79fcfcc8841190ad1c76b613c2ff6d00640a9e80723bee511f5098d6", 0x72, 0x4000}, 0x4840) epoll_pwait(r5, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:38 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r3, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:38 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r2, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) pipe(&(0x7f0000000600)) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:38 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:38 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:38 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) getpid() pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r2, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:38 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) write$cgroup_subtree(r0, &(0x7f0000000d80)={[{0x2b, 'memory'}, {0x2d, 'pids'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0xd5735f71a7132b0b, 'pids'}, {0x2d, 'io'}]}, 0x22) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000e00)={0x40000000}) 11:48:38 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r6, &(0x7f0000000a00)=@name, &(0x7f0000000a40)=0x10) epoll_pwait(r5, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:38 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r2, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:38 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:38 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:38 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0x8, 0x18}, 0xc) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r2, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:38 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000d40)={0x20000019}) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) 11:48:38 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r5, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:38 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r2, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:38 executing program 0: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x4}, 0x8) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r1, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:38 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:38 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:38 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) connect$tipc(r2, &(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x1}}, 0x10) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:38 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r1, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:38 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x18, 0x1402, 0x400, 0x70bd28, 0x1f, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x240c40c0}, 0x4890) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) 11:48:38 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r5, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:38 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:38 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:38 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:38 executing program 0: pipe(0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r0, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:38 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:38 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:39 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:39 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) ioctl$PPPIOCDISCONN(r0, 0x7439) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) 11:48:39 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) bind$bt_sco(r1, &(0x7f0000000540)={0x1f, @none}, 0x8) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:39 executing program 0: pipe(0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r0, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:39 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket(0x18, 0x1, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:39 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket(0x1e, 0x4, 0x100) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:39 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:39 executing program 0: pipe(0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r0, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:39 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x52089000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000480)={0x710, 0x0, 0x5, 0x301, 0x0, 0x0, {0xc, 0x0, 0x5}, [{{0x254, 0x1, {{0x3, 0x98b}, 0x1, 0x2, 0x4, 0x5, 0x7, 'syz1\x00', "3b99fd4ffad5e61912cc5d856f0a1efcbfc1af21a57a76a9f3e7eaba50c17b60", "3526237df8a4702036573605913d6e7a5d9b93b7c4600a1627d67895b9c76b3e", [{0x2, 0x3, {0x2, 0x3}}, {0x9, 0x1, {0x3, 0xf9}}, {0x9, 0x7, {0x2, 0x856b}}, {0x32d, 0x9b, {0x2, 0x10001}}, {0xc638, 0x7, {0x0, 0x80000001}}, {0x7, 0x2, {0x2, 0x2}}, {0x100, 0x4, {0x0, 0x2}}, {0x7, 0x9, {0x0, 0x7f}}, {0x8, 0xfee8, {0x1, 0x3}}, {0x0, 0x0, {0x0, 0x4}}, {0x0, 0x8, {0x1, 0x5}}, {0x6, 0x0, {0x2, 0x100}}, {0x812, 0x4c00, {0x2, 0x7}}, {0x0, 0x2, {0x2, 0x7ff}}, {0xfe2, 0x7, {0x3}}, {0x400, 0xff, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x8}}, {0x44eb, 0x7, {0x2, 0x9}}, {0x9, 0xfffd, {0x0, 0x3}}, {0x80, 0xa9, {0x3, 0x5}}, {0x7, 0x643c, {0x2, 0x6}}, {0x9, 0x6, {0x2, 0xcb1}}, {0x2000, 0x3, {0x3, 0x3}}, {0x8, 0x7, {0x3, 0x9}}, {0x8001, 0x8001, {0x3}}, {0x800, 0x7f, {0x0, 0xffff4bdb}}, {0x6, 0x9, {0x2, 0x1000}}, {0x8, 0x1, {0x3, 0x9}}, {0x6b86, 0x7, {0x2, 0xad0}}, {0xdef, 0xfc00, {0x1, 0x4}}, {0x0, 0x0, {0xe1d7b3320e79c012}}, {0x8, 0x5, {0x0, 0x9}}, {0x98, 0x2, {0x1, 0x1}}, {0x6, 0x6, {0x0, 0x9}}, {0x2000, 0x3f, {0x1, 0xd31}}, {0x6, 0xaaae}, {0x7, 0x5, {0x0, 0x7}}, {0x9, 0x1, {0x0, 0xe7}}, {0x1, 0xb2, {0x0, 0x27c}}, {0x1, 0x400, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x2}, 0x40, 0x3, 0x6, 0x1ff, 0xd, 'syz1\x00', "bab8544ab4717f0365f7a32ff6fec5b3f0f3640de08e20d0193b3fe2999a2441", "22a485c83465d818f7a7a53f4d93177f1fc109cc3ca18195921d9174855daf60", [{0xffff, 0x401, {0x3, 0x7fff}}, {0x5, 0x0, {0x3}}, {0xf0, 0x4, {0x1, 0x8}}, {0x1, 0x100, {0x3, 0xe04d}}, {0xc3c, 0xf60, {0x0, 0x4788}}, {0x8, 0x20, {0x1, 0x5}}, {0x0, 0x3f, {0x1, 0xe5}}, {0x1, 0xff, {0x2, 0xfffffffa}}, {0x8000, 0x1, {0x2, 0x6}}, {0x1, 0x30, {0x2, 0x7}}, {0x8001, 0x8, {0x3, 0x212}}, {0x6, 0x40, {0x3, 0x8}}, {0x3, 0x8, {0x2, 0x2}}, {0x6, 0x8, {0x3}}, {0x8001, 0x800, {0x0, 0x2}}, {0x7, 0xba, {0x1, 0x8}}, {0x1f, 0x1a1, {0x2, 0x61c3}}, {0x1, 0xe31, {0x3, 0x1f}}, {0x5, 0x5, {0x1, 0xfff}}, {0x5, 0x0, {0x1, 0x9}}, {0x19ef, 0x4, {0x3, 0x6}}, {0x800, 0x0, {0x2, 0x1}}, {0x6b, 0xfff, {0x0, 0xffff6572}}, {0x1ff, 0x9, {0x1, 0x3}}, {0x9, 0x56bd, {0x0, 0x1f}}, {0x7ff, 0x9, {0x3, 0x1}}, {0x18e}, {0x1ff, 0x7fff, {0x2, 0xee8}}, {0x0, 0xf6d9, {0x3, 0x3}}, {0x200, 0x5, {0x1}}, {0x7, 0xf1b7, {0x0, 0x1}}, {0x8, 0x49f, {0x3, 0x100}}, {0x1, 0x5, {0x1, 0x9}}, {0xfff8, 0x3, {0x0, 0xee6}}, {0x2, 0x7fff, {0x3, 0xfffffbff}}, {0xf6ee, 0x800, {0x0, 0x7}}, {0x3162, 0x9, {0x1, 0xf8f}}, {0x6, 0x7, {0x4, 0x3}}, {0x8, 0x20, {0x1, 0x1}}, {0x100, 0x1, {0x1, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x4482}, 0xff, 0xff, 0x233, 0x0, 0x18, 'syz1\x00', "1795892aee339eed6ae60ff9d1844a15f22133f8023b4f523b64d70d19766262", "2f27cca306bf4b9b97afa0060ef06fa911f16927eb9dbffc6f4b2f6c5ef3948c", [{0x0, 0xffff, {0x0, 0x6b14}}, {0x1, 0x401, {0x0, 0x20}}, {0x336, 0xe931, {0x3, 0x2}}, {0x8001, 0x0, {0x0, 0x101}}, {0x3, 0x8, {0x0, 0x4}}, {0x4, 0x2, {0x2, 0x2}}, {0xfff8, 0x466, {0x3, 0x8}}, {0x1000, 0x7, {0x2, 0x10000}}, {0xff, 0xec, {0x2}}, {0x7e, 0x9, {0x1, 0x1}}, {0x1000, 0x1ff, {0x3, 0xffff}}, {0xfffa, 0x0, {0x0, 0xfa4a}}, {0x2, 0x3, {0x1, 0x55e}}, {0x6, 0x2, {0x1, 0x4}}, {0x1000, 0x5, {0x0, 0x3f}}, {0x5, 0xcd8, {0x3, 0x9}}, {0x3, 0x20, {0x0, 0x9d9}}, {0x4, 0x0, {0x1, 0x2}}, {0x3, 0x3, {0x3, 0x2}}, {0x1, 0xed50, {0x3, 0x1}}, {0x8, 0x1, {0x2, 0xee}}, {0x81, 0xfffb, {0x0, 0x7fff}}, {0x1, 0x3ff, {0x3, 0x7ff}}, {0x1, 0x4, {0x3, 0x1f}}, {0x0, 0x1000, {0x3, 0x7ff}}, {0x8, 0x7, {0x0, 0x401}}, {0x7, 0x2, {0x1, 0x3f}}, {0x0, 0x401, {0x2, 0x6a6}}, {0x3, 0xf4a, {0x2, 0xc36}}, {0x4, 0xbbf2, {0x0, 0x4}}, {0x3ff, 0x1, {0x1, 0x5}}, {0x4, 0x8, {0x3, 0x4}}, {0x5, 0x6, {0x2, 0x2}}, {0x0, 0x1, {0x0, 0x5}}, {0x7f, 0x81, {0x2, 0x7ff80}}, {0x49, 0x3ff, {0x2, 0x100}}, {0x0, 0x1, {0x2, 0x5}}, {0x1, 0x6, {0x3, 0xffff5f42}}, {0x5, 0x4, {0x1, 0x1}}, {0x3abe, 0xfff7, {0x3, 0x80000001}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20000001}, 0x24004001) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) 11:48:39 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:39 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) socket(0x1e, 0x4, 0x100) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:39 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) socket(0x18, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:39 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r1, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:39 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:39 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) [ 84.459094][T10325] validate_nla: 5 callbacks suppressed [ 84.459105][T10325] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 84.513750][T10328] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10328 [ 84.523440][T10328] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 84.529994][T10328] CPU: 0 PID: 10328 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 84.539707][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.549769][T10328] Call Trace: [ 84.553071][T10328] dump_stack+0x107/0x163 [ 84.557409][T10328] check_preemption_disabled+0x123/0x130 [ 84.563037][T10328] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 84.568741][T10328] trace_hardirqs_on+0x5b/0x1c0 [ 84.573578][T10328] __bad_area_nosemaphore+0xc6/0x400 [ 84.578852][T10328] do_user_addr_fault+0x7d7/0xb40 [ 84.583870][T10328] exc_page_fault+0x9e/0x180 [ 84.588446][T10328] ? asm_exc_page_fault+0x8/0x30 [ 84.593367][T10328] asm_exc_page_fault+0x1e/0x30 [ 84.598200][T10328] RIP: 0033:0x43c6b0 [ 84.602084][T10328] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 84.621844][T10328] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 84.627898][T10328] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 84.635856][T10328] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 84.643813][T10328] RBP: 0000000000000005 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 84.651769][T10328] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 84.659723][T10328] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c [ 84.667803][T10328] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10328 [ 84.677489][T10328] caller is lockdep_hardirqs_on+0x38/0x110 [ 84.683346][T10328] CPU: 0 PID: 10328 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 84.692102][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.702158][T10328] Call Trace: [ 84.705458][T10328] dump_stack+0x107/0x163 [ 84.709801][T10328] check_preemption_disabled+0x123/0x130 [ 84.715487][T10328] ? __bad_area_nosemaphore+0xc6/0x400 [ 84.720999][T10328] lockdep_hardirqs_on+0x38/0x110 [ 84.726042][T10328] __bad_area_nosemaphore+0xc6/0x400 [ 84.731327][T10328] do_user_addr_fault+0x7d7/0xb40 [ 84.736356][T10328] exc_page_fault+0x9e/0x180 [ 84.740943][T10328] ? asm_exc_page_fault+0x8/0x30 [ 84.745891][T10328] asm_exc_page_fault+0x1e/0x30 [ 84.750730][T10328] RIP: 0033:0x43c6b0 [ 84.754664][T10328] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 84.774262][T10328] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 84.780321][T10328] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 84.788287][T10328] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 84.797199][T10328] RBP: 0000000000000005 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 84.805152][T10328] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 11:48:39 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) socket(0x1e, 0x4, 0x100) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) [ 84.813104][T10328] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c 11:48:40 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) socket(0x18, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:40 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) [ 84.862884][T10336] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:40 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) r4 = socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r6, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:40 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000400)=0x1) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f0000000e00)={0x40000000}) 11:48:40 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) socket(0x18, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:40 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:40 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r4, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) [ 85.116182][T10349] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:40 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:40 executing program 0: pipe(&(0x7f0000000600)) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r0, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:40 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:40 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x1407, 0x800, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000100}, 0x4881) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:40 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000e00)={0x40000000}) 11:48:40 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r4, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:40 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) [ 85.499291][T10373] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:40 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x28, &(0x7f0000000240)}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') [ 85.544788][T10378] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10378 [ 85.554448][T10378] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 85.560978][T10378] CPU: 0 PID: 10378 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 85.569740][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.579800][T10378] Call Trace: [ 85.583104][T10378] dump_stack+0x107/0x163 [ 85.587452][T10378] check_preemption_disabled+0x123/0x130 11:48:40 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) socket$l2tp(0x2, 0x2, 0x73) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:40 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000004c0)) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) [ 85.593106][T10378] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 85.598840][T10378] trace_hardirqs_on+0x5b/0x1c0 [ 85.603710][T10378] __bad_area_nosemaphore+0xc6/0x400 [ 85.609009][T10378] do_user_addr_fault+0x7d7/0xb40 [ 85.614141][T10378] exc_page_fault+0x9e/0x180 [ 85.618738][T10378] ? asm_exc_page_fault+0x8/0x30 [ 85.623682][T10378] asm_exc_page_fault+0x1e/0x30 [ 85.628533][T10378] RIP: 0033:0x43c6b0 [ 85.632436][T10378] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 85.652044][T10378] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 85.658129][T10378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.666111][T10378] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 85.674155][T10378] RBP: 0000000000000005 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 85.682134][T10378] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 85.690119][T10378] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c [ 85.698228][T10378] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10378 [ 85.707671][T10378] caller is lockdep_hardirqs_on+0x38/0x110 [ 85.713550][T10378] CPU: 0 PID: 10378 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 85.722303][T10378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.732341][T10378] Call Trace: [ 85.735621][T10378] dump_stack+0x107/0x163 [ 85.739957][T10378] check_preemption_disabled+0x123/0x130 [ 85.745583][T10378] ? __bad_area_nosemaphore+0xc6/0x400 [ 85.751027][T10378] lockdep_hardirqs_on+0x38/0x110 [ 85.756061][T10378] __bad_area_nosemaphore+0xc6/0x400 [ 85.761334][T10378] do_user_addr_fault+0x7d7/0xb40 [ 85.766349][T10378] exc_page_fault+0x9e/0x180 [ 85.770933][T10378] ? asm_exc_page_fault+0x8/0x30 [ 85.775867][T10378] asm_exc_page_fault+0x1e/0x30 [ 85.780698][T10378] RIP: 0033:0x43c6b0 [ 85.784576][T10378] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 85.804160][T10378] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 85.810209][T10378] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 85.818163][T10378] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 85.826227][T10378] RBP: 0000000000000005 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 85.834180][T10378] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 11:48:41 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000e00)={0x40000000}) [ 85.842132][T10378] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c 11:48:41 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r4, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:41 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') [ 85.886340][T10387] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:41 executing program 0: pipe(&(0x7f0000000600)) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r0, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:41 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x47}, @void, @val={0xc, 0x99, {0x5a, 0x51}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x814}, 0x4040) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:41 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) socket$l2tp(0x2, 0x2, 0x73) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:41 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000e00)={0x40000000}) 11:48:41 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x9, 0x10}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:41 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r4, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) [ 86.173547][T10401] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 86.232341][T10409] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10409 [ 86.242178][T10409] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 86.248699][T10409] CPU: 1 PID: 10409 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 86.257457][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.267516][T10409] Call Trace: [ 86.270819][T10409] dump_stack+0x107/0x163 [ 86.275168][T10409] check_preemption_disabled+0x123/0x130 [ 86.280808][T10409] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 86.286516][T10409] trace_hardirqs_on+0x5b/0x1c0 [ 86.291357][T10409] __bad_area_nosemaphore+0xc6/0x400 [ 86.296629][T10409] do_user_addr_fault+0x7d7/0xb40 [ 86.301650][T10409] exc_page_fault+0x9e/0x180 [ 86.306227][T10409] ? asm_exc_page_fault+0x8/0x30 [ 86.311148][T10409] asm_exc_page_fault+0x1e/0x30 [ 86.315981][T10409] RIP: 0033:0x43c6b0 [ 86.319875][T10409] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 86.339488][T10409] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 86.345559][T10409] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 86.353517][T10409] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 86.361476][T10409] RBP: 0000000000000005 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 86.369430][T10409] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 86.377385][T10409] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c [ 86.385535][T10409] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10409 [ 86.394953][T10409] caller is lockdep_hardirqs_on+0x38/0x110 [ 86.400775][T10409] CPU: 1 PID: 10409 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 86.409620][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.419679][T10409] Call Trace: [ 86.422978][T10409] dump_stack+0x107/0x163 [ 86.427339][T10409] check_preemption_disabled+0x123/0x130 [ 86.432978][T10409] ? __bad_area_nosemaphore+0xc6/0x400 [ 86.438528][T10409] lockdep_hardirqs_on+0x38/0x110 [ 86.443560][T10409] __bad_area_nosemaphore+0xc6/0x400 [ 86.448859][T10409] do_user_addr_fault+0x7d7/0xb40 [ 86.454595][T10409] exc_page_fault+0x9e/0x180 [ 86.459195][T10409] ? asm_exc_page_fault+0x8/0x30 [ 86.464140][T10409] asm_exc_page_fault+0x1e/0x30 [ 86.468991][T10409] RIP: 0033:0x43c6b0 [ 86.472894][T10409] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 86.492507][T10409] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 86.498587][T10409] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 86.506568][T10409] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 86.514549][T10409] RBP: 0000000000000005 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 86.522549][T10409] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 11:48:41 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) socket$l2tp(0x2, 0x2, 0x73) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:41 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:41 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket(0x1f, 0x6, 0x66) sendto$l2tp6(r1, &(0x7f00000000c0)="7f5d2620215b39cd8c456ba09d18b096c2814a7d67a6b8839ac122a9ac05af525c27f19d081d645e442819eaa239401b8a174f735f7d3465936ccc91707b653a3abb8853df7a07d8c8538dea197e7a37ad69cdf6bea28b59077f5d1639ca816bf4544e516dc26286da79c97d7f9bcfc2c169376ec7c37fd064cacb0d5ce8d489dab1d8a07a81e99983206828a5219f04ff7cf316059d6f3df6fe35bfb69bfdb918f92a0081258f56cbc05c83d40afa5be5f45f11eab1cf8adc827a01d46e0ce2a63ec2989221b3de1b", 0xc9, 0x4000040, &(0x7f00000001c0)={0xa, 0x0, 0x3, @remote, 0x5, 0x1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') [ 86.530531][T10409] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c 11:48:41 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000400)=0x1) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000e00)={0x40000000}) 11:48:41 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r4, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) [ 86.593792][T10414] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:41 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:41 executing program 0: pipe(&(0x7f0000000600)) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640), 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r0, 0x308, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x615c]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x40000) 11:48:41 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x11, r0, 0x1451c000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:41 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000900)={0x29, 0x2}) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r4, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:41 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000400)=0x1) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000e00)={0x40000000}) 11:48:41 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) socket(0x1f, 0x6, 0x66) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') [ 86.777530][T10425] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:42 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) [ 86.908399][T10435] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10435 [ 86.918123][T10435] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 86.924722][T10435] CPU: 0 PID: 10435 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 86.933477][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.943530][T10435] Call Trace: [ 86.946832][T10435] dump_stack+0x107/0x163 [ 86.950873][T10438] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 86.951171][T10435] check_preemption_disabled+0x123/0x130 [ 86.951200][T10435] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 86.970553][T10435] trace_hardirqs_on+0x5b/0x1c0 [ 86.975392][T10435] __bad_area_nosemaphore+0xc6/0x400 [ 86.980663][T10435] do_user_addr_fault+0x7d7/0xb40 [ 86.985681][T10435] exc_page_fault+0x9e/0x180 [ 86.990255][T10435] ? asm_exc_page_fault+0x8/0x30 [ 86.995176][T10435] asm_exc_page_fault+0x1e/0x30 [ 87.000016][T10435] RIP: 0033:0x43c6b0 [ 87.003900][T10435] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 87.023510][T10435] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 87.029567][T10435] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 87.037534][T10435] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 87.045580][T10435] RBP: 0000000000000005 R08: 0000000000000004 R09: 00007f74311c3bb0 11:48:42 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) socket(0x1f, 0x6, 0x66) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') [ 87.053560][T10435] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 87.061525][T10435] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c [ 87.069610][T10435] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10435 [ 87.079152][T10435] caller is lockdep_hardirqs_on+0x38/0x110 [ 87.085042][T10435] CPU: 0 PID: 10435 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 87.093804][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.103860][T10435] Call Trace: 11:48:42 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) [ 87.107160][T10435] dump_stack+0x107/0x163 [ 87.111502][T10435] check_preemption_disabled+0x123/0x130 [ 87.117150][T10435] ? __bad_area_nosemaphore+0xc6/0x400 [ 87.122618][T10435] lockdep_hardirqs_on+0x38/0x110 [ 87.127649][T10435] __bad_area_nosemaphore+0xc6/0x400 [ 87.132947][T10435] do_user_addr_fault+0x7d7/0xb40 [ 87.137985][T10435] exc_page_fault+0x9e/0x180 [ 87.142568][T10435] ? asm_exc_page_fault+0x8/0x30 [ 87.147510][T10435] asm_exc_page_fault+0x1e/0x30 [ 87.152363][T10435] RIP: 0033:0x43c6b0 [ 87.156267][T10435] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 87.175657][T10442] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 87.175983][T10435] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 87.190114][T10435] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 87.198094][T10435] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 11:48:42 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:42 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = socket(0x28, 0x1, 0x3) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000400)=0x1) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000e00)={0x40000000}) 11:48:42 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) [ 87.206245][T10435] RBP: 0000000000000005 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 87.214223][T10435] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 87.222198][T10435] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c 11:48:42 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:42 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x40000) 11:48:42 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) socket(0x1f, 0x6, 0x66) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:42 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:42 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:42 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) socket(0x28, 0x1, 0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000400)=0x1) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000e00)={0x40000000}) 11:48:42 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x14c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x7}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "669c622ffdabfd3cbb816e7a1e09a39f89b9aa58615a3f3b"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "42db3d9f80bdf884d1f4b519880266178290b078edbba08c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a3dbdb474e8f4780822f35116fb04b58861f5d9fbb0527c5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x14c}}, 0x10008000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) [ 87.745690][T10471] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10471 [ 87.755327][T10471] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 87.762026][T10471] CPU: 1 PID: 10471 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 87.770801][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.780863][T10471] Call Trace: [ 87.784204][T10471] dump_stack+0x107/0x163 [ 87.788558][T10471] check_preemption_disabled+0x123/0x130 [ 87.794211][T10471] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 87.799955][T10471] trace_hardirqs_on+0x5b/0x1c0 [ 87.804816][T10471] __bad_area_nosemaphore+0xc6/0x400 [ 87.810115][T10471] do_user_addr_fault+0x7d7/0xb40 [ 87.815164][T10471] exc_page_fault+0x9e/0x180 [ 87.819765][T10471] ? asm_exc_page_fault+0x8/0x30 [ 87.824732][T10471] asm_exc_page_fault+0x1e/0x30 [ 87.829625][T10471] RIP: 0033:0x43c6b0 11:48:42 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:42 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:42 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) [ 87.833532][T10471] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 87.853879][T10471] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 87.859958][T10471] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 87.867935][T10471] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 87.876015][T10471] RBP: 0000000000000005 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 87.883996][T10471] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 87.891979][T10471] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c [ 87.900566][T10471] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10471 [ 87.914842][T10471] caller is lockdep_hardirqs_on+0x38/0x110 [ 87.920682][T10471] CPU: 1 PID: 10471 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 87.929618][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.939678][T10471] Call Trace: [ 87.942983][T10471] dump_stack+0x107/0x163 [ 87.947328][T10471] check_preemption_disabled+0x123/0x130 [ 87.952970][T10471] ? __bad_area_nosemaphore+0xc6/0x400 [ 87.958441][T10471] lockdep_hardirqs_on+0x38/0x110 [ 87.963474][T10471] __bad_area_nosemaphore+0xc6/0x400 [ 87.968777][T10471] do_user_addr_fault+0x7d7/0xb40 [ 87.973811][T10471] exc_page_fault+0x9e/0x180 [ 87.978393][T10471] ? asm_exc_page_fault+0x8/0x30 [ 87.983316][T10471] asm_exc_page_fault+0x1e/0x30 [ 87.988147][T10471] RIP: 0033:0x43c6b0 [ 87.992029][T10471] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 88.011619][T10471] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 88.017675][T10471] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 88.035104][T10471] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 11:48:43 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') [ 88.043072][T10471] RBP: 0000000000000005 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 88.051031][T10471] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 88.058991][T10471] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c 11:48:43 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004801}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000400)=0x1) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000e00)={0x40000000}) 11:48:43 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:43 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) 11:48:43 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:43 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:43 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:43 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:43 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x80}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000400)=0x1) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f0000000e00)={0x40000000}) 11:48:43 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:43 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:43 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) 11:48:43 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080)='l2tp\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000400)=0x1) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000e00)={0x40000000}) 11:48:43 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:43 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:43 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:43 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:43 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:44 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:44 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) 11:48:44 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000400)=0x1) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000e00)={0x40000000}) 11:48:44 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x1, [@local]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:44 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:44 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:44 executing program 1: sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xd2}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x48}, 0x1, 0x0, 0x0, 0x237e2b692e28beef}, 0x8090) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:44 executing program 0: pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) 11:48:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)=0x1) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:44 executing program 3: ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:44 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:44 executing program 0: pipe(&(0x7f0000000600)) syz_genetlink_get_family_id$SEG6(0x0) 11:48:44 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:44 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:44 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:44 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)=0x1) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:44 executing program 0: syz_genetlink_get_family_id$SEG6(0x0) 11:48:44 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:44 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:44 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) [ 89.571224][T10592] check_preemption_disabled: 10 callbacks suppressed [ 89.571240][T10592] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10592 [ 89.587531][T10592] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 89.594140][T10592] CPU: 0 PID: 10592 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 89.602909][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.612966][T10592] Call Trace: [ 89.624779][T10592] dump_stack+0x107/0x163 [ 89.630086][T10592] check_preemption_disabled+0x123/0x130 [ 89.635739][T10592] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 89.641470][T10592] trace_hardirqs_on+0x5b/0x1c0 [ 89.646333][T10592] __bad_area_nosemaphore+0xc6/0x400 [ 89.651632][T10592] do_user_addr_fault+0x7d7/0xb40 [ 89.656686][T10592] exc_page_fault+0x9e/0x180 [ 89.661283][T10592] ? asm_exc_page_fault+0x8/0x30 [ 89.666230][T10592] asm_exc_page_fault+0x1e/0x30 [ 89.671084][T10592] RIP: 0033:0x43c6b0 [ 89.674991][T10592] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 89.694603][T10592] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 89.700683][T10592] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 89.708661][T10592] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 89.716657][T10592] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 89.724633][T10592] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 89.732608][T10592] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c [ 89.741480][T10592] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10592 [ 89.751145][T10592] caller is lockdep_hardirqs_on+0x38/0x110 [ 89.756968][T10592] CPU: 0 PID: 10592 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 89.765722][T10592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.775773][T10592] Call Trace: [ 89.779072][T10592] dump_stack+0x107/0x163 [ 89.783413][T10592] check_preemption_disabled+0x123/0x130 [ 89.789050][T10592] ? __bad_area_nosemaphore+0xc6/0x400 [ 89.794518][T10592] lockdep_hardirqs_on+0x38/0x110 [ 89.799553][T10592] __bad_area_nosemaphore+0xc6/0x400 [ 89.801022][T10593] validate_nla: 8 callbacks suppressed [ 89.801031][T10593] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 89.804859][T10592] do_user_addr_fault+0x7d7/0xb40 [ 89.804887][T10592] exc_page_fault+0x9e/0x180 [ 89.804902][T10592] ? asm_exc_page_fault+0x8/0x30 [ 89.804916][T10592] asm_exc_page_fault+0x1e/0x30 [ 89.804927][T10592] RIP: 0033:0x43c6b0 [ 89.804947][T10592] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 89.862460][T10592] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 11:48:45 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x1404, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x8000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:45 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') [ 89.868537][T10592] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 89.876517][T10592] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 89.884496][T10592] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 89.892478][T10592] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 89.900458][T10592] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c 11:48:45 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)=0x1) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:45 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x844) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:45 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:45 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x8000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:45 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xa8, r2, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6be89c95d60189c373e4f4ded1ddba88f055a40d3bae93a6"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1d536aa9175af1337eb0be1709c332cf216712feb9506e3d"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x40881) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:45 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x8000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) [ 90.229199][T10612] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:45 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00') socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r2, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r3, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:45 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:45 executing program 4: pipe(0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)=0x1) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:45 executing program 0: syz_genetlink_get_family_id$SEG6(0x0) 11:48:45 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:45 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) [ 90.640409][T10635] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 90.672358][T10638] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10638 [ 90.682232][T10638] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 90.688770][T10638] CPU: 1 PID: 10638 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 90.697540][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.707599][T10638] Call Trace: [ 90.710904][T10638] dump_stack+0x107/0x163 [ 90.715255][T10638] check_preemption_disabled+0x123/0x130 [ 90.720903][T10638] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 90.726631][T10638] trace_hardirqs_on+0x5b/0x1c0 [ 90.731494][T10638] __bad_area_nosemaphore+0xc6/0x400 11:48:45 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r2, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:45 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) [ 90.736796][T10638] do_user_addr_fault+0x7d7/0xb40 [ 90.741843][T10638] exc_page_fault+0x9e/0x180 [ 90.746445][T10638] ? asm_exc_page_fault+0x8/0x30 [ 90.751395][T10638] asm_exc_page_fault+0x1e/0x30 [ 90.756248][T10638] RIP: 0033:0x43c6b0 [ 90.760150][T10638] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 90.779760][T10638] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 90.785840][T10638] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 90.793819][T10638] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 90.801797][T10638] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 90.809777][T10638] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 90.817755][T10638] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c [ 90.826880][T10638] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10638 [ 90.836895][T10638] caller is lockdep_hardirqs_on+0x38/0x110 [ 90.842775][T10638] CPU: 1 PID: 10638 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 90.851562][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 90.861618][T10638] Call Trace: [ 90.864918][T10638] dump_stack+0x107/0x163 [ 90.869260][T10638] check_preemption_disabled+0x123/0x130 [ 90.874924][T10638] ? __bad_area_nosemaphore+0xc6/0x400 [ 90.880398][T10638] lockdep_hardirqs_on+0x38/0x110 [ 90.885437][T10638] __bad_area_nosemaphore+0xc6/0x400 [ 90.891177][T10638] do_user_addr_fault+0x7d7/0xb40 [ 90.896224][T10638] exc_page_fault+0x9e/0x180 [ 90.900837][T10638] ? asm_exc_page_fault+0x8/0x30 [ 90.905785][T10638] asm_exc_page_fault+0x1e/0x30 [ 90.908367][T10647] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 90.910632][T10638] RIP: 0033:0x43c6b0 11:48:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:46 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) [ 90.910648][T10638] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 90.910658][T10638] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 90.910674][T10638] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 90.910683][T10638] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 90.910693][T10638] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 90.910703][T10638] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 90.910713][T10638] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c 11:48:46 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r2, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:46 executing program 4: pipe(0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)=0x1) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:46 executing program 0: syz_genetlink_get_family_id$SEG6(0x0) 11:48:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') [ 91.162969][T10657] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10657 [ 91.172582][T10657] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 91.179118][T10657] CPU: 1 PID: 10657 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 91.187881][T10657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.197942][T10657] Call Trace: [ 91.201247][T10657] dump_stack+0x107/0x163 [ 91.205598][T10657] check_preemption_disabled+0x123/0x130 [ 91.211258][T10657] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 91.216987][T10657] trace_hardirqs_on+0x5b/0x1c0 [ 91.221851][T10657] __bad_area_nosemaphore+0xc6/0x400 [ 91.227151][T10657] do_user_addr_fault+0x7d7/0xb40 [ 91.232206][T10657] exc_page_fault+0x9e/0x180 [ 91.236809][T10657] ? asm_exc_page_fault+0x8/0x30 [ 91.241756][T10657] asm_exc_page_fault+0x1e/0x30 [ 91.246696][T10657] RIP: 0033:0x43c6b0 [ 91.250602][T10657] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 91.270221][T10657] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 91.276299][T10657] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 91.284814][T10657] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 91.293612][T10657] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 91.301686][T10657] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 11:48:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:46 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) [ 91.311005][T10657] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c [ 91.320304][T10657] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10657 [ 91.330802][T10657] caller is lockdep_hardirqs_on+0x38/0x110 [ 91.337930][T10657] CPU: 1 PID: 10657 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 91.348265][T10657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 91.359459][T10657] Call Trace: [ 91.362764][T10657] dump_stack+0x107/0x163 [ 91.367112][T10657] check_preemption_disabled+0x123/0x130 [ 91.374518][T10657] ? __bad_area_nosemaphore+0xc6/0x400 [ 91.379990][T10657] lockdep_hardirqs_on+0x38/0x110 [ 91.385114][T10657] __bad_area_nosemaphore+0xc6/0x400 [ 91.391336][T10657] do_user_addr_fault+0x7d7/0xb40 [ 91.396470][T10657] exc_page_fault+0x9e/0x180 [ 91.401069][T10657] ? asm_exc_page_fault+0x8/0x30 [ 91.406014][T10657] asm_exc_page_fault+0x1e/0x30 11:48:46 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) r0 = socket$l2tp(0x2, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) [ 91.410864][T10657] RIP: 0033:0x43c6b0 [ 91.414761][T10657] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 91.434370][T10657] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 91.440454][T10657] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 91.448432][T10657] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 91.456409][T10657] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 91.464386][T10657] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 91.472383][T10657] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c 11:48:46 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r2, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:46 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x8000) pipe(0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) [ 91.533877][T10671] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:46 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:46 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:46 executing program 4: pipe(0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000400)=0x1) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:46 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x8000) pipe(0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:46 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) [ 91.748849][T10683] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:47 executing program 0: pipe(0x0) syz_genetlink_get_family_id$SEG6(0x0) 11:48:47 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000400)=0x1) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000e00)={0x40000000}) 11:48:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:47 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:47 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x8000) pipe(0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000700)) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:47 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) [ 92.175233][T10706] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 92.214479][T10711] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10711 [ 92.225235][T10711] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 92.232017][T10711] CPU: 1 PID: 10711 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 92.241132][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.253681][T10711] Call Trace: [ 92.257075][T10711] dump_stack+0x107/0x163 [ 92.262210][T10711] check_preemption_disabled+0x123/0x130 [ 92.268178][T10711] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 92.275389][T10711] trace_hardirqs_on+0x5b/0x1c0 [ 92.283090][T10711] __bad_area_nosemaphore+0xc6/0x400 [ 92.289092][T10711] do_user_addr_fault+0x7d7/0xb40 [ 92.294176][T10711] exc_page_fault+0x9e/0x180 [ 92.298776][T10711] ? asm_exc_page_fault+0x8/0x30 [ 92.303723][T10711] asm_exc_page_fault+0x1e/0x30 [ 92.308580][T10711] RIP: 0033:0x43c6b0 [ 92.312485][T10711] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 92.332095][T10711] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 92.338172][T10711] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 92.346150][T10711] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 92.354131][T10711] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 92.362127][T10711] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 92.370104][T10711] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c [ 92.378739][T10711] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10711 [ 92.390653][T10711] caller is lockdep_hardirqs_on+0x38/0x110 [ 92.397135][T10711] CPU: 1 PID: 10711 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 92.405898][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.415952][T10711] Call Trace: [ 92.419251][T10711] dump_stack+0x107/0x163 [ 92.423602][T10711] check_preemption_disabled+0x123/0x130 [ 92.429248][T10711] ? __bad_area_nosemaphore+0xc6/0x400 [ 92.434724][T10711] lockdep_hardirqs_on+0x38/0x110 [ 92.439757][T10711] __bad_area_nosemaphore+0xc6/0x400 [ 92.441699][T10715] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 92.445049][T10711] do_user_addr_fault+0x7d7/0xb40 [ 92.445077][T10711] exc_page_fault+0x9e/0x180 [ 92.445091][T10711] ? asm_exc_page_fault+0x8/0x30 [ 92.445110][T10711] asm_exc_page_fault+0x1e/0x30 [ 92.472488][T10711] RIP: 0033:0x43c6b0 [ 92.476383][T10711] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 92.495993][T10711] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 92.502710][T10711] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 92.510687][T10711] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 92.518665][T10711] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f74311c3bb0 11:48:47 executing program 2: epoll_wait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}, {}], 0x4, 0x905) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:47 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x8000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:47 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x913}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x76e1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1176}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:47 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x8000) pipe(&(0x7f0000000500)) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:47 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000400)=0x1) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000e00)={0x40000000}) [ 92.526642][T10711] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 92.534616][T10711] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c 11:48:47 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:48 executing program 0: pipe(0x0) syz_genetlink_get_family_id$SEG6(0x0) 11:48:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:48 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:48 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x8000) pipe(&(0x7f0000000500)) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) 11:48:48 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000400)=0x1) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:48 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r1, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) [ 93.051234][T10739] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 93.072409][T10742] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10742 [ 93.082442][T10742] caller is lockdep_hardirqs_on_prepare+0x5e/0x410 [ 93.088965][T10742] CPU: 0 PID: 10742 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 93.097725][T10742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.107786][T10742] Call Trace: [ 93.111087][T10742] dump_stack+0x107/0x163 [ 93.115434][T10742] check_preemption_disabled+0x123/0x130 [ 93.121087][T10742] lockdep_hardirqs_on_prepare+0x5e/0x410 [ 93.126817][T10742] trace_hardirqs_on+0x5b/0x1c0 [ 93.131681][T10742] __bad_area_nosemaphore+0xc6/0x400 [ 93.136990][T10742] do_user_addr_fault+0x7d7/0xb40 [ 93.142056][T10742] exc_page_fault+0x9e/0x180 [ 93.146659][T10742] ? asm_exc_page_fault+0x8/0x30 [ 93.151608][T10742] asm_exc_page_fault+0x1e/0x30 [ 93.156464][T10742] RIP: 0033:0x43c6b0 [ 93.160367][T10742] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 93.179983][T10742] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 93.186064][T10742] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 93.194044][T10742] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 93.202049][T10742] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 93.210027][T10742] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 93.218003][T10742] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c [ 93.226818][T10742] BUG: using __this_cpu_read() in preemptible [00000000] code: syz-executor.0/10742 [ 93.236926][T10742] caller is lockdep_hardirqs_on+0x38/0x110 [ 93.243013][T10742] CPU: 0 PID: 10742 Comm: syz-executor.0 Not tainted 5.10.0-rc1-syzkaller #0 [ 93.251772][T10742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.261827][T10742] Call Trace: [ 93.265125][T10742] dump_stack+0x107/0x163 [ 93.269471][T10742] check_preemption_disabled+0x123/0x130 [ 93.275107][T10742] ? __bad_area_nosemaphore+0xc6/0x400 [ 93.280573][T10742] lockdep_hardirqs_on+0x38/0x110 [ 93.285604][T10742] __bad_area_nosemaphore+0xc6/0x400 [ 93.290903][T10742] do_user_addr_fault+0x7d7/0xb40 [ 93.295942][T10742] exc_page_fault+0x9e/0x180 [ 93.300538][T10742] ? asm_exc_page_fault+0x8/0x30 [ 93.305483][T10742] asm_exc_page_fault+0x1e/0x30 [ 93.310338][T10742] RIP: 0033:0x43c6b0 [ 93.314240][T10742] Code: 66 0f ef c0 66 0f ef c9 66 0f ef d2 66 0f ef db 48 89 f8 48 89 f9 48 81 e1 ff 0f 00 00 48 81 f9 cf 0f 00 00 77 74 48 83 e0 f0 <66> 0f 74 00 66 0f 74 48 10 66 0f 74 50 20 66 0f 74 58 30 66 0f d7 [ 93.333848][T10742] RSP: 002b:00007f74311c3ba8 EFLAGS: 00010246 [ 93.339927][T10742] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 11:48:48 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:48 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:48 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x8000) pipe(&(0x7f0000000500)) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000007c0)={{0x2, 0x4e22, @loopback}, {0x6, @random="0c68bc681537"}, 0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth0\x00'}) [ 93.347905][T10742] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000000 [ 93.355880][T10742] RBP: 0000000000000003 R08: 0000000000000004 R09: 00007f74311c3bb0 [ 93.363854][T10742] R10: 0000000000000000 R11: 000000000000000f R12: 00007f74311c3bf0 [ 93.371830][T10742] R13: 00007ffd8f1858cf R14: 00007f74311c59c0 R15: 000000000118bf2c 11:48:48 executing program 5: sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:48 executing program 0: pipe(0x0) syz_genetlink_get_family_id$SEG6(0x0) [ 93.459906][T10750] netlink: 'syz-executor.2': attribute type 2 has an invalid length. 11:48:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:48 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:48 executing program 1: sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x8000) pipe(&(0x7f0000000500)={0xffffffffffffffff}) accept$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) 11:48:48 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:48 executing program 5: sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:48 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:48 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:48 executing program 1: pipe(0x0) syz_genetlink_get_family_id$SEG6(0x0) 11:48:48 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xcd}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:49 executing program 5: sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:49 executing program 1: pipe(0x0) syz_genetlink_get_family_id$SEG6(0x0) 11:48:49 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:49 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:49 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, 0x0, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:49 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r1, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:49 executing program 4: pipe(&(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000e00)={0x40000000}) 11:48:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:49 executing program 1: pipe(0x0) syz_genetlink_get_family_id$SEG6(0x0) 11:48:49 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, 0x0, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:49 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000e00)={0x40000000}) 11:48:49 executing program 4: pipe(&(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000dc0)='ns/ipc\x00') epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000e00)={0x40000000}) 11:48:49 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x268, r0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8}, @val={0xc, 0x99, {0x712, 0x33}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x238, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x22c, 0x4, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}, @NL80211_PKTPAT_PATTERN={0xd8, 0x2, "07f719e0055cf79fbe79fa78c3208759c7df289aa027b3ce86ed6a73f129d72886fa5c59893f01adc948394bf098f09b85bcf53abd81e89832c9e03434a3e8487bf617ddd05b96044db290b541fd57abc3a84ef723b85e8fa4b057d3cf888686f2d15669812c1d950c0d1c0b5bea202f3939362ea835f0f177a76129cee8dd8d532a74b722d161dc64830e5e40b63b13d199ae6455dd906065482c455c9e9a1a43708e02530456a572a571835ffdc1eb40973151891bf8024e51748a9b1ceee2f59a680d739d094afc04fc31683c876be21fbae1"}, @NL80211_PKTPAT_PATTERN={0xd0, 0x2, "12e6993a582a7ac5d800e7a0ba036119281a1236f9e5e6f0b8a16ccae588473c2e6cb498d1150048fade8cda107248e9d70aec7f12392c6f4db5c14927c80725810835a988cad356120a2bf3eee4d6aa7fbb6c73cdc1c5cc9c6153f7fbd84942c2282556edf34faf9bc5bbe43fefe3609f6ab301b9d90c20b72138c6fb4a3e04dc6fa9b03c3e8c42d8f54b784a3df7f2731a8a21101587a51ddb8a809aaa808eab71475bf4ee5f1d44a99caeae6d23157e68db7d076f2502517ea104b4ffa6807472976ba325fc5dd8305fdb"}, @NL80211_PKTPAT_PATTERN={0x4}, @NL80211_PKTPAT_MASK={0x6c, 0x1, "5b8d6b5a4896f13053a886bb2e76c5e5750f947521fa12dd1de87fb8858096b0fb8208cdb2d7e2d53efa8204372a846bcb8a819e530842f8d478e6fcdded8eeab20d52a47a23dcc9095255b55172d037735bf2f2bf0c6ef6bae2e639093e417b26136181da75a33c"}]}, {0x4}]}]}]}, 0x268}, 0x1, 0x0, 0x0, 0x40080}, 0x4080) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x50}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000009c0)={0xffffffffffffffff}) epoll_pwait(r1, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x5, &(0x7f0000000f40)={[0x3]}, 0x8) socket(0x1c, 0x1, 0x6) 11:48:49 executing program 1: syz_genetlink_get_family_id$SEG6(0x0) 11:48:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x8060) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/time\x00') 11:48:49 executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, 0x0, 0x20000886) socket(0x6, 0x5, 0x7fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48084}, 0x14) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, 0x0, 0x9, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x3}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 11:48:49 executing program 0: pipe(&(0x7f0000000000)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0)