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", 0x1000, 0x2}, {&(0x7f0000000340)="69f59e510dd2", 0x6, 0x7}, {&(0x7f0000001400)="1af769895184f46d73b52191fba28c4b3f58dd51fa6d1b56e722fe57caaab8880babaaf457dd14cc8925c6d2872b5d5c5c9a4bc14ede626e97d8d40c5cca37b5e6994dc1a6d139622c80", 0x4a, 0x400}, {&(0x7f0000001480)="c564867dc5a2a436aabea7cee767ee7692cb7fee985d04cd2159272a1608efb5e5da10b952860850df4b225e0883827078f3c053d3047470813521008036a73aa8bb0e21c05b4f771d20c0a02e8dbc28bf914fbad1802ed06189e115816f9168af92b0b3b2e357dd", 0x68, 0x8}, {&(0x7f0000001500)="c07e48f3201d352c81e014a0f058c11f15ec5bf455b0", 0x16, 0x80000000}]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r7, 0xcf}, 0x8) 22:31:01 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') write$P9_RREMOVE(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e21, @rand_addr=0x9}}, 0x0, 0x0, 0x47, 0x0, "a27315aa1d1a8599884eac026fa14c3152f1496fe01d3fff6f522df094d2b070159c1e11d1e065d66d7cce0121a11adaa84ca110b578e4dcf59d35df0304ad346042adb0b351b8020f70952c5ed7a7e5"}, 0xd8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r4 = socket(0x10, 0x80002, 0x0) close(r4) syz_read_part_table(0x2, 0x5, &(0x7f0000001540)=[{&(0x7f0000000400)="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", 0x1000, 0x2}, {&(0x7f0000000340)="69f59e510dd2", 0x6, 0x7}, {&(0x7f0000001400)="1af769895184f46d73b52191fba28c4b3f58dd51fa6d1b56e722fe57caaab8880babaaf457dd14cc8925c6d2872b5d5c5c9a4bc14ede626e97d8d40c5cca37b5e6994dc1a6d139622c80", 0x4a, 0x400}, {&(0x7f0000001480)="c564867dc5a2a436aabea7cee767ee7692cb7fee985d04cd2159272a1608efb5e5da10b952860850df4b225e0883827078f3c053d3047470813521008036a73aa8bb0e21c05b4f771d20c0a02e8dbc28bf914fbad1802ed06189e115816f9168af92b0b3b2e357dd", 0x68, 0x8}, {&(0x7f0000001500)="c07e48f3201d352c81e014a0f058c11f15ec5bf455b0", 0x16, 0x80000000}]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r7, 0xcf}, 0x8) 22:31:01 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000040)={{0x831, 0x2, 0x8, 0x6}, 'syz0\x00', 0x29}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000000)=""/53) 22:31:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d23b80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60350000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:01 executing program 5: openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c80)={0xc, 0x0, &(0x7f0000000180)=[@dead_binder_done], 0x24, 0x0, &(0x7f0000000640)="6fa04a1700d4e99f4318dee156ddbf362ad92cedc98a8c6e39fadf6c580763ca1ce66a69"}) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000040)=""/156, 0x80305}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f0000000340)=""/54, 0x7ffff}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/77, 0x4d}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/219, 0xdb}], 0x7, 0x60}}], 0x48}, 0x0) syz_mount_image$xfs(&(0x7f0000000680)='xfs\x00', &(0x7f0000000800)='./file0\x00', 0x5, 0xc48, &(0x7f0000000c00)=[{&(0x7f0000000880)="487e78d91c2fb1c93b1bada1c911c80e2d675d391bfbe6cdf9f10f83065a2ff1d0f3e233e6953361cdb9111fe174e2114808426d0b416629fc55ba03444842aa1640581a6706927d7f24d0063fbfef52434e39cd8d8fc0fbbc363114c10da481187f4355a373edc92e65379505e15166094384c58f70c97260173fc22fc3e8dc6850297fdc32821b8de13ba306e3510e68d431ffe99a22926e2278e10f0cda629f170b096ab06a29ae52759dfa0a8fcc9b014aadb3fe38dfa0a4125f3ec56dc5339504baabfafad5dff5797df216f2a4c499ea7071258618d11bd46fe99185d43d52bbb389a872c24c2e8027ddc679", 0xef}, {&(0x7f0000000980)="853013f0caf558a8f1adcd36142200469225b3990113569e279aa68ee2d6030117bf6f3c89fddac3a1e594825063b94ba9e9741c7d9dc6d7ee41b18c3efe5e1572c4bb9daf49b2db7c14a5def580fea06e4977859acf7513159e08bd5c890d1d0890090a24507b1b608d1c44ddb6620025503de90922f7301361fbabcd6f0047ef7bd81f4d935bf5eb151b24eebb4235383e", 0x92, 0xffffffffffffffe1}, {&(0x7f0000000a40)="517de589a6c032ab8c22f940fea02866fd4337a3b7a2fafb1204c879a3744f24013001e46f4bbb859d50ae6bd35502c60710c04d717af64851a15fb5970d352dc182e870d42b11ec60a4857ab84ce7a60993b6e357d25462b487bc7f97fdc9e06a1641f8631c57162acabc67a9c8298803e62689072ed168a7002ae878d23989bd3e9d", 0x83, 0xecc5}, {&(0x7f0000000b00)="5a4c3b2f019c7138c9fa6bfd9fb8123dc84f0837ad6fc35907bc401c02288f1f2ae3c2cc945c49f7a1dfb657330bbf986afe88cfcc35dca183217b3b28a2025e1d809678", 0x44, 0x3f}, {&(0x7f0000000b80)="43298ef5797ef8b148cd1e414c6d0f7c2722e354dddeb30533a8bd34ea3f2e073e06341e5d91f9fca85e3494e451f8ff2a130f74099eb984780625e403b2cbe1e89341ee62348bd3f89e74d82c10d4126cfbbbf3927aa5a3eead9eb1f31aa33200", 0x61, 0xd9ac}], 0x10000, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 22:31:01 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0x8) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000040)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8040, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 22:31:01 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') write$P9_RREMOVE(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e21, @rand_addr=0x9}}, 0x0, 0x0, 0x47, 0x0, "a27315aa1d1a8599884eac026fa14c3152f1496fe01d3fff6f522df094d2b070159c1e11d1e065d66d7cce0121a11adaa84ca110b578e4dcf59d35df0304ad346042adb0b351b8020f70952c5ed7a7e5"}, 0xd8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) r4 = socket(0x10, 0x80002, 0x0) close(r4) syz_read_part_table(0x2, 0x5, &(0x7f0000001540)=[{&(0x7f0000000400)="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", 0x1000, 0x2}, {&(0x7f0000000340)="69f59e510dd2", 0x6, 0x7}, {&(0x7f0000001400)="1af769895184f46d73b52191fba28c4b3f58dd51fa6d1b56e722fe57caaab8880babaaf457dd14cc8925c6d2872b5d5c5c9a4bc14ede626e97d8d40c5cca37b5e6994dc1a6d139622c80", 0x4a, 0x400}, {&(0x7f0000001480)="c564867dc5a2a436aabea7cee767ee7692cb7fee985d04cd2159272a1608efb5e5da10b952860850df4b225e0883827078f3c053d3047470813521008036a73aa8bb0e21c05b4f771d20c0a02e8dbc28bf914fbad1802ed06189e115816f9168af92b0b3b2e357dd", 0x68, 0x8}, {&(0x7f0000001500)="c07e48f3201d352c81e014a0f058c11f15ec5bf455b0", 0x16, 0x80000000}]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r7, 0xcf}, 0x8) 22:31:01 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf003, 0x6c00000000000000}, 0x334, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000593bf0f162fb001c000729d5000000000039f5d830430d15a3093f84af4dfddec3242aee477dc6ec50a655e5f3aa02b02dc7aafdc74b30e01310d96c9dcd2aa673a504c17110d08779075337", @ANYRES32=r1, @ANYBLOB="701b6e000a000200aaaaaaaaaa0c001f010000004f1c2b52760000000048aa91c105e6c9de7b24c97c65648b72c6e18f373e45991720b65fefedd7e6a4bf136854a948b38b4bd646faef1fc55f82398f282f690e8b00fd7bee1be60365f3a623f2699f833ffd221b7d020000004206550c308c723cd601869b7a736d001000000000000056dd32cd1ee9a41210fdb278b50e7328efd316c523c74ec8bb1c0b35ec9f32a847341e7488cbce5dcccc4ccd99af45b548b7d697d4eb4bc77df6a67375751627e602f988768108dd16b2bbc9884f0e19126dfeedb7d5f7081fbea110386036db1a2b22d7d3931791ce50cf3f0000000000000000000000000000b24513be63c4b7ad03008d2aa97d0f8da23e6bfe694eb43dbfdd26c82d46cd334cedd299756099ff781a95d779c1bfefe9f4d9bbcc16dac0c696cfda193554c9361e2ad446dbc46db90651df1f53c39b1a282f70e08b5aa672f294c310bd545d971a5c1ff155e5febd883da1cdd012bdfe21f47f494b637ac3a954ad98defa7c20fece27f319e3fdbfd4fd8912843abf22f687175f1d616c27fdb1624f8966eff6ca24"], 0x42e}}, 0x0) r2 = socket(0x10, 0x8000000000000003, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x40000000000024a, 0x0) [ 479.414420][T13306] netlink: 18402 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:01 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000040)={{0x831, 0x2, 0x8, 0x6}, 'syz0\x00', 0x29}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000000)=""/53) 22:31:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d23c80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601a4800000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:02 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r6, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4) bind(r6, &(0x7f0000000040)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="0884"], 0x2) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000180)={0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r5, 0x0, 0x10005, 0x9) 22:31:02 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) lookup_dcookie(0x100000000052, &(0x7f0000000240)=""/161, 0xa1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) chmod(&(0x7f0000000200)='./file0\x00', 0x48) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20\x00', 0x408400, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, 0xfffffffffffffffe) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x40}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x20000800) ioperm(0x80000000, 0x8, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000400)={0x1, 0x1, [0x5, 0x6, 0x9, 0x80000001, 0xc0000000, 0x7ff, 0x74, 0x2]}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000000200"/71], 0x48) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) 22:31:02 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x11901, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x120, 0x0, 0x0, 0x9, 0x1004, 0x0, 0x5097}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/65, &(0x7f00000000c0)=0x41) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) rmdir(&(0x7f0000000000)='./file0\x00') dup2(r0, r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000001a00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001a40)=0x10, 0x800) connect(r3, &(0x7f0000001a80)=@caif=@dgm={0x25, 0x4, 0x9}, 0x80) 22:31:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d23d80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60586500000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:02 executing program 0: setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x8001, 0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r3 = dup3(0xffffffffffffffff, r0, 0x80000) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x13) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 22:31:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d23e80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 480.165596][T13341] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.3'. [ 480.318335][T13347] validate_nla: 4 callbacks suppressed [ 480.318348][T13347] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 480.707843][ T8223] tipc: TX() has been purged, node left! [ 482.236141][T13353] IPVS: ftp: loaded support on port[0] = 21 [ 482.293737][T13353] chnl_net:caif_netlink_parms(): no params data found [ 482.336902][T13353] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.345273][T13353] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.353644][T13353] device bridge_slave_0 entered promiscuous mode [ 482.361719][T13353] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.369643][T13353] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.380576][T13353] device bridge_slave_1 entered promiscuous mode [ 482.399901][T13353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.412448][T13353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.432856][T13353] team0: Port device team_slave_0 added [ 482.440890][T13353] team0: Port device team_slave_1 added [ 482.456569][T13353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.464105][T13353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.492387][T13353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.504794][T13353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.512603][T13353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.541960][T13353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.590001][T13353] device hsr_slave_0 entered promiscuous mode [ 482.637997][T13353] device hsr_slave_1 entered promiscuous mode [ 482.677658][T13353] debugfs: Directory 'hsr0' with parent '/' already present! [ 482.712667][T13353] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.720602][T13353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.728336][T13353] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.735618][T13353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.773814][T13353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.787369][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 482.798164][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.807323][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.817721][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 482.830723][T13353] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.843744][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 482.854041][ T2411] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.864449][ T2411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.877097][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.887245][ T8139] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.894323][ T8139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.921682][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.932097][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.941896][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.956023][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.970052][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.982060][T13353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 483.000037][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 483.008644][ T2411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 483.021706][T13353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.078606][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 483.100045][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 483.110750][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 483.119070][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 483.129799][T13353] device veth0_vlan entered promiscuous mode [ 483.143081][T13353] device veth1_vlan entered promiscuous mode [ 483.163582][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 483.173182][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 483.182787][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 483.195072][T13353] device veth0_macvtap entered promiscuous mode [ 483.206466][T13353] device veth1_macvtap entered promiscuous mode [ 483.223315][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 483.235248][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.246246][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 483.257312][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.267877][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 483.279277][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.290015][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 483.301010][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.312643][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 483.324020][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.335892][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 483.348199][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.361253][T13353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.371371][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 483.382733][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 483.393661][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 483.404743][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.415462][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 483.427188][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.438173][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 483.449678][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.460766][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 483.471826][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.482853][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 483.494165][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.504548][T13353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 483.516142][T13353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.529500][T13353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.537975][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 483.548389][ T8110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 22:31:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60008100000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:06 executing program 2: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x11901, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x120, 0x0, 0x0, 0x9, 0x1004, 0x0, 0x5097}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000000040)=""/65, &(0x7f00000000c0)=0x41) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000240)) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) rmdir(&(0x7f0000000000)='./file0\x00') dup2(r0, r1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = accept4$llc(0xffffffffffffffff, &(0x7f0000001a00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001a40)=0x10, 0x800) connect(r3, &(0x7f0000001a80)=@caif=@dgm={0x25, 0x4, 0x9}, 0x80) 22:31:06 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)=0xf1eb) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24180648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:06 executing program 1: r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = getpid() tkill(r1, 0x1000000000015) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r1, r3, 0x0, 0x5, &(0x7f0000000000)='\xb9@!*\x00', 0xffffffffffffffff}, 0x30) gettid() r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) waitid(0x0, r4, &(0x7f0000000200), 0x2, &(0x7f0000000280)) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f0000000180)="f4001100002b2c25e994efd18498d66205baa68754a30005000002000000000000000000000000002100000000000000c0010001050af32ebdbed828026256be5452644135333a847bbaeb4e914b976c5b7e34", 0x53}], 0x1}, 0x0) 22:31:06 executing program 5: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x3, 0x10000) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x9, 0x4) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f00000002c0)) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x1, 0x4) fcntl$setstatus(r2, 0x4, 0x40000) r4 = socket(0x10, 0x80002, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x3, 0x7, [0x81, 0x6, 0x1ff, 0x8, 0xff, 0x129d, 0x2]}, &(0x7f0000000100)=0x16) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0b000000c9e869f4"], &(0x7f0000000280)=0x13) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r8+30000000}, 0x0) [ 483.803977][T13382] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60900000200a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 483.882084][T13390] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24280648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:06 executing program 2: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="1020f5f20100070009000000030000000c0000000900000001000000f8585e8a020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c000000100000001400000300000001000000021beda1b0db008e3572fb60561a154dec3a5928a26746d9968fe8df22635ca7789195b02c2918c3644607478bbf6df45b8288ee21fc7e604acc34e875015a495363", 0xae, 0x1400}], 0x0, 0x0) 22:31:06 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) userfaultfd(0x140000) [ 484.043164][T13397] netlink: 18314 bytes leftover after parsing attributes in process `syz-executor.3'. [ 484.132471][T13400] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:06 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24380648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000001000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:06 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r2 = socket(0x15, 0x80005, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001040)={'sit0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="040000000000000000000000aa74efce2395fa375a45e24eb890591b22e36861221574b6e4be6fc9a034bcc2b19b3d"]}) fdatasync(0xffffffffffffffff) close(0xffffffffffffffff) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000007029e5e36fc3e001"}, r4}}, 0x284) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000016c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x100, @local, 0x6}, r4}}, 0x30) 22:31:06 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0185879, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 484.374214][T13414] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 484.419999][T13416] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:06 executing program 0: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r6, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x400cc) close(r0) r8 = socket$kcm(0x29, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) close(r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r12, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r10, 0x10f, 0x80, &(0x7f0000000180)=0x400, 0x4) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="08002b000c00000005002f0000000000"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x1, 0x4) 22:31:06 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100200000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 484.690040][T13428] netlink: 17930 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:09 executing program 1: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r6, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x400cc) close(r0) r8 = socket$kcm(0x29, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) close(r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r12, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r10, 0x10f, 0x80, &(0x7f0000000180)=0x400, 0x4) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="08002b000c00000005002f0000000000"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x1, 0x4) 22:31:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24480648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:09 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x9b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_tcp_int(r2, 0x6, 0xc, &(0x7f00000001c0), &(0x7f0000000180)=0x4) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x30, r3, 0x0) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f000b7cf9500ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000000000269fb5ed2b4dc88e000000009500"/108], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000100)="b901000000000000009e40f088471fffffe100004000638477fbac141414e9a33fa1be3e7d2a182fff", 0x0, 0x100, 0x6000000000000000}, 0x28) r7 = socket$unix(0x1, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket(0x10, 0x80002, 0x0) close(r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000f000000080003f5", @ANYRES32=r10, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000400)={0x9e0000, 0x1, 0x6, r9, 0x0, &(0x7f0000000300)={0x9d0904, 0x6, [], @p_u16=&(0x7f00000002c0)=0x6}}) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r12, 0x40044104, &(0x7f0000000440)=0x8) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r13 = socket(0x10, 0x80002, 0x0) close(r13) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r15, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r13, 0x29, 0x45, &(0x7f0000000140)={'icmp6\x00'}, &(0x7f0000000280)=0x1e) prctl$PR_SET_ENDIAN(0x14, 0x1) syz_open_procfs(0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r16 = getpid() tkill(r16, 0x1000000000015) sched_setscheduler(r16, 0x0, 0x0) 22:31:09 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x1d}, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100300000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:09 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0185879, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 486.988389][T13446] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 487.016084][T13447] netlink: 17674 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24580648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100400000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket(0x10, 0x80002, 0x0) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @loopback}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c40), 0x0, &(0x7f0000000cc0)="d8c9fd2b7ba7fa20e0", 0x9}, 0x0) 22:31:09 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x20}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x20000800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940)='batadv\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0xfff1}}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd62f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r7 = socket$unix(0x1, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/vhost-net\x00', 0x2, 0x0) r8 = socket(0x10, 0x80002, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2a4fb3f59fc25ee4b9000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcsu\x00', 0xa0c0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000ac0)={r11, 0x7327, 0x3, "c1cf37af46a71384ff0b16226023092b393bf5068360a12c4b1bfc6442e18eba3d18c3df2d1a4363ca8446064c2f2aba026a"}) r12 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r13, 0x400452c8, &(0x7f0000000100)) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) recvmsg$can_raw(r14, &(0x7f00000008c0)={&(0x7f0000000040)=@pppoe, 0x80, &(0x7f0000000800)=[{&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/63, 0x3f}, {&(0x7f0000000740)=""/133, 0x85}], 0x9}, 0x12000) [ 487.309167][T13457] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 487.318422][T13458] netlink: 17418 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24680648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100500000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 487.485658][T13468] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:09 executing program 0: set_mempolicy(0x1, &(0x7f0000000200)=0x2, 0x8) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x80000, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) lsetxattr$security_evm(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@md5={0x1, "1b9c1d0fbf53dfa274763009a13dfbf8"}, 0x11, 0x3) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f0000000000)={0x9, 0x0, [], {0x0, @reserved}}) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 22:31:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24780648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 487.629024][T13474] netlink: 17162 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.752772][T13478] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:12 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x20}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x20000800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940)='batadv\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0xfff1}}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd62f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r7 = socket$unix(0x1, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/vhost-net\x00', 0x2, 0x0) r8 = socket(0x10, 0x80002, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2a4fb3f59fc25ee4b9000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcsu\x00', 0xa0c0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000ac0)={r11, 0x7327, 0x3, "c1cf37af46a71384ff0b16226023092b393bf5068360a12c4b1bfc6442e18eba3d18c3df2d1a4363ca8446064c2f2aba026a"}) r12 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r13, 0x400452c8, &(0x7f0000000100)) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) recvmsg$can_raw(r14, &(0x7f00000008c0)={&(0x7f0000000040)=@pppoe, 0x80, &(0x7f0000000800)=[{&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/63, 0x3f}, {&(0x7f0000000740)=""/133, 0x85}], 0x9}, 0x12000) 22:31:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = socket(0x10, 0x80002, 0x0) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000000)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @loopback}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c40), 0x0, &(0x7f0000000cc0)="d8c9fd2b7ba7fa20e0", 0x9}, 0x0) 22:31:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100600000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:12 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0185879, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:12 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c000000b18a3e9d14983416145f649d33ab47fe621689b7b91034e34c5ad06e4d900e698a1131ae0a9d3a89bcfe9c080784b72f73f7f6b25411fd8380b2725eea5729af93b3f4089cb5916ba3aaf2fb40f7cca22e81fb6c2d87d8bbadb9c6b8b9208e0655", @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/full\x00', 0x18100, 0x0) r4 = request_key(&(0x7f0000000940)='id_legacy\x00', &(0x7f0000000980)={'syz', 0x2}, &(0x7f0000000a40)='netdevsim0\x00', 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000a80)='.request_key_auth\x00', &(0x7f0000000ac0)={'syz', 0x2}, &(0x7f0000000b00)="5144a3f67a0d64363ff64f6a0875c366d067c882e6f3b87703f713f58e7fcc57ac7cdac7c69c37874f7b026c584ddcb4549b33595ad19e1202dd088f9bba60055f0839ee163c6cb7d30f68e5cb0e07d0e19cf06b7e4433b83736dadd8445e518a00d34af891b59f8317a912d25e731e599c7e56916c7558003904c45a7df088ea690c1d0ec37fb3e890b4707e0cd56ee9ee7878dd505f7c1f8ec3a567505817182479f253c07a0b1a0e9ab9c42cf0ed184108bee3f7a265882cecb623973", 0xbe, 0xfffffffffffffff9) keyctl$negate(0xd, r4, 0x3, r5) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={0x0, @phonet={0x23, 0xa8, 0xc1, 0xe1}, @can={0x1d, 0x0}, @phonet={0x23, 0xff, 0x0, 0x80}, 0xf001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x209}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/btrfs-control\x00', 0x105080, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000a00)={'netdevsim0\x00', 0x1000}) getpeername(0xffffffffffffffff, &(0x7f0000000700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0x80) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=@newchain={0xbc, 0x64, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff2, 0xfff1}, {0xa}, {0x7, 0x9}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x6c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r8}, @TCA_ROUTE4_POLICE={0x58, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x1, 0x2854, 0x6, 0x4, {0xff, 0x2, 0x1, 0x2, 0x7, 0x100}, {0xfb, 0x2, 0x7fff, 0x7, 0x48f, 0x7fffffff}, 0x1f, 0x2, 0xffffffff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x3}}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff7}, @TCA_RATE={0x6, 0x5, {0x40, 0x2}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0xff}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20040080}, 0x40004) r9 = socket(0x10, 0x80002, 0x0) close(r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r11, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000900)) sendmsg$tipc(r9, &(0x7f0000000540)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x3}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="f73f3b", 0x3}, {&(0x7f0000000200)="db59ca41b9e0fd6ace9b7b3ec6bbe685f023e0bf4f8e7cb1fde8854c78b24a913f63a5806e31377895e3642d86b99c93b85d6f89238f69292690b16e4bc5ca33e6936a2f58d29a8821eb113fe00240acbc68fb7639e517e4e783f7312a33b58c3609fa02378196db2f83cb450cb2ea5c56865bbf082d9c21f570bdd341ede49d91989e", 0x83}, {&(0x7f00000002c0)="a95fc5e70cf04c6a065808935f98b34de28188be4a1df0893cb75ae24012a8cefad9ea55ad8341da0f3efc1f2f9088c63e801478cdcd8bbf2dc0a534b22f2f1e270ca8eadebb6761f1cb11b17c48da9651c6db1e678d0c44c04f33f8f944b531be9fa0227d72d05f7f80d78be43805d4671c51cfd35ceac9eeee3976a7c07f73ec0421ab5d28a320f01e937a18de4302ee097858464db49666e938326fa1d2f5c45dfe833cfa1a6b7eb81d5411a224f1a81f51a8", 0xb4}, {&(0x7f0000000380)="387d7366172b3abe09009f45fe0c845df1e3254382ece49aede3cd939312c0bc06a682562925ea3590d785f039034e25110ad43a1071633fa96ae98adddff54880793801caafec9c860fa7fad96f4a33fc25ab7769718b7dc3e113ad65fbcbf9e246e921c776f04ce37473967a4b001e8a17b081fa70f2ce045fec4daa833fc4bded849b46eb76074086f77e1427bf945153a15b575ff3d8420ba4b68d45464112943b0a1e4cecfa46fbc63c6901e3127ff02d4b88f94b8a039e48084b2384aea566d8b582a2920e4b985f7292d7cb948f", 0xd1}], 0x4, &(0x7f0000000480)="7bc1896aab910f9c3c0daa24b2ef8f25e76213a6aa7b05440c2bfffc0446b8d00b908eab3118bfbc1f731efbc769ecff70edec709c6a8df8dad5cf305896ae30d992f2dd23caa23c3e474cb275be7f0dc4a6c49758b2680ed2d87ca28b97a536e97579b141d56e75867b0070a24938df90e0957721ffccee0a66afe51432967153d37b06af3538ac47bb0ffe300b3ee199ca5d174c03ffbfa5dbce3a8f02521c3db0d663c85c", 0xa6, 0x8000}, 0x24000010) 22:31:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24880648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 490.096067][T13491] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 490.106100][T13490] netlink: 16906 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100700000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24980648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:12 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) move_mount(r2, &(0x7f0000000280)='./file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x42) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10302, 0x40) ioctl$VIDIOC_G_FBUF(r6, 0x8030560a, &(0x7f0000000080)={0x4, 0x12, &(0x7f0000000200)="cbba3ea5bd245b120d4e8065bba7522618f7c7c2140c4eb27da74a41efefeb1267913fe80e5ac4bef3a56a2ae0842f68afa42f81a1ce6a20453b4c77b5e45e432a5fbb00", {0x7, 0xfffffbff, 0x50565559, 0xa51d129a5be7bcc2, 0x200, 0x5, 0x8, 0x7ff}}) 22:31:12 executing program 1: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="02009e07599616a4adc3f589fbfcaa40052e374be47a7e7841f0d93b7c9bf46d3d81274ad36532f9ce0f4d2ec862997cd681a76e8c8aef93404d83d62620c1ace5f9a7a366727d01f7b7719daccb84", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000200)) r0 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket(0x10, 0x4, 0x0) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000700)) r1 = creat(0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000740)={{{@in6=@loopback, @in6=@empty}}, {{}, 0x0, @in6=@local}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) fsopen(&(0x7f0000000100)='sockfs\x00', 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x400, 0x7ff, &(0x7f00000008c0)) 22:31:12 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x20}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x20000800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940)='batadv\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0xfff1}}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd62f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r7 = socket$unix(0x1, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/vhost-net\x00', 0x2, 0x0) r8 = socket(0x10, 0x80002, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2a4fb3f59fc25ee4b9000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcsu\x00', 0xa0c0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000ac0)={r11, 0x7327, 0x3, "c1cf37af46a71384ff0b16226023092b393bf5068360a12c4b1bfc6442e18eba3d18c3df2d1a4363ca8446064c2f2aba026a"}) r12 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r13, 0x400452c8, &(0x7f0000000100)) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) recvmsg$can_raw(r14, &(0x7f00000008c0)={&(0x7f0000000040)=@pppoe, 0x80, &(0x7f0000000800)=[{&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/63, 0x3f}, {&(0x7f0000000740)=""/133, 0x85}], 0x9}, 0x12000) [ 490.453191][T13508] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 490.483482][T13511] netlink: 16650 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24a80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:13 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000000)={0x7, 0x26, 0x8, 0x1f, 0x3, 0xffff, 0x4, 0xeb, 0xfffffffffffffffe}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioperm(0x101, 0x15fc, 0xedbd) 22:31:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100a00000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:13 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x20}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x20000800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940)='batadv\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x2, 0xfff1}}}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xd62f}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r7 = socket$unix(0x1, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/vhost-net\x00', 0x2, 0x0) r8 = socket(0x10, 0x80002, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2a4fb3f59fc25ee4b9000000", @ANYRES16=r10, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vcsu\x00', 0xa0c0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000ac0)={r11, 0x7327, 0x3, "c1cf37af46a71384ff0b16226023092b393bf5068360a12c4b1bfc6442e18eba3d18c3df2d1a4363ca8446064c2f2aba026a"}) r12 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r13, 0x400452c8, &(0x7f0000000100)) r14 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400000, 0x0) recvmsg$can_raw(r14, &(0x7f00000008c0)={&(0x7f0000000040)=@pppoe, 0x80, &(0x7f0000000800)=[{&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000280)=""/166, 0xa6}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/208, 0xd0}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/63, 0x3f}, {&(0x7f0000000740)=""/133, 0x85}], 0x9}, 0x12000) [ 490.767366][T13521] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 490.829042][T13525] netlink: 15882 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:13 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0185879, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:13 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x5) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) set_robust_list(&(0x7f0000000200)={&(0x7f0000000000), 0x20, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24b80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100e00000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:13 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ion\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000940)='/dev/cuse\x00', 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$isdn(0xffffffffffffffff, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x10001, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x800, 0x0) ioctl$TIOCGICOUNT(r3, 0x545d, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [0x6c, 0x2, 0xd401, 0x0, 0x0, 0x0, 0x3fc]}, 0x3b, r2}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000900)={0xaa, 0xc85932fdc71dc0c1}) r6 = socket$inet_dccp(0x2, 0x6, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) listen(r5, 0x6) ioctl$DRM_IOCTL_GET_STATS(r4, 0x80f86406, 0x0) setsockopt(r6, 0x10d, 0x0, &(0x7f00001c9fff)="03", 0x1) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) dup3(r5, r5, 0x0) r7 = accept(r5, 0x0, &(0x7f0000000080)=0x10058) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000340)={0x1f, @any, 0x1}, 0xa) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000200)={r8, 0x40}, &(0x7f0000000240)=0x8) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000400)='erspan0\x00', 0x700e) sendmmsg(r6, &(0x7f000000a080)=[{{0x0, 0x0, &(0x7f0000005640)=[{&(0x7f0000001900)="bfcb482812cb7fb967e30d6491478eddc7cafd2fd9c13521b9c7d346febe996316754beb5fa1d9d0b07855e5c5ff1d9c038d8e4e8b976efb89d362233e10c87ce18e60ecc21d15718430bdb68142", 0x4e}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) [ 491.068996][T13534] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x7f, 0x162080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000a80)={0x358, r1, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x40}, @NL80211_ATTR_IE={0x2d6, 0x2a, "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"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1273}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_SSIDS={0x54, 0x2d, 0x0, 0x1, [{0x6, 0x0, [0xd, 0x3]}, {0x6, 0x0, [0x18, 0x0]}, {0x9, 0x0, [0x0, 0x11, 0x8, 0x1b, 0x0]}, {0x5, 0x0, [0x1f]}, {0x9, 0x0, [0x1f, 0x0, 0x14, 0x1e, 0x20]}, {0x5, 0x0, [0xe]}, {0x8, 0x0, [0x19, 0x0, 0x0, 0x0]}, {0x6, 0x0, [0x6, 0x0]}, {0x8, 0x0, [0x19, 0x0, 0x0, 0x16]}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x4000880}, 0x24004000) r2 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r2, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x4, 0xff, 0x0, 0x2, 0x0, 0x80000000, 0x31, 0x7, 0xa4, 0x93d, 0x4, 0x3, 0x9, 0xffffff1c, 0x10, 0x0, {0x6, 0x165b003}, 0x6, 0x79}}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$unix(0x1, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setns(r6, 0x20000000) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x42eef, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="68000000100005074a03ffff0001506200000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="601fd3f16851e0279a5e1b53122dc4f518c243ea25d1747ccc8a4354d0e9851b1b0e522d7c812efa5dfa3305b8fe923173001ccba60cfed045f98809642dc84a8f5cdddde19795cea91a08d9fd5c6f4c3f793776420a27fa5d675a972ee5dc4248ae6c82c84a73769c8ff333d82f58ba58d55db815e9f024d0e8ee7c51a5792f81e4aa39d347be9c0589c37d25f00de69004e4c4ab37cf4c889eb2bc71500ff58d4f4ca3aa0d1e40964a2507d2d99fb8ff3fd9a2c0e6"], 0x68}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x61ef, 0x1, 0x1, 0x3, 0x2, 0x2}, &(0x7f0000000240)=0x20) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000002000/0x2000)=nil, 0x3) [ 491.146721][T13541] netlink: 14858 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24c80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60104800000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:13 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000010}, 0x4000010) r1 = open(&(0x7f0000000000)='./file0\x00', 0x400800, 0x140) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0xffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xff}, 0x0, 0x1}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) [ 491.286251][T13544] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 491.372301][T13550] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 491.411618][T13557] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60104c00000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24d80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:14 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x80) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, &(0x7f0000000000)={0x2, 0x2}) [ 491.656659][T13573] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:14 executing program 5: socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) 22:31:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24e80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:14 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x5) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) set_robust_list(&(0x7f0000000200)={&(0x7f0000000000), 0x20, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60106000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:14 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0)=0x401, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x101100, 0x0) write$P9_RREAD(r1, &(0x7f00000002c0)={0xa5, 0x75, 0x2, {0x9a, "4a9b3d96aa820f720af019d43a775f39c071a722f6d0035e304570b4115b5805e9500ba850c66375b3e44292aa17e28aabbaa322a3d9c5ee42abda0a0f73a6b7a54be35eda36d780dbb32a56e54756b836223032de4fb197efabb1fd515bbee9277f5541c262c027c10b8d06afb797586c74cd4163642c6fe148812fb8bacd0a8df5ca2e9cfc1ca8e42c692d6417379896c10f66ca808136c639"}}, 0xa5) init_module(&(0x7f0000000000)='em0\x00', 0x4, &(0x7f0000000040)='\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 22:31:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000080)) bind$inet6(r1, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x9e, @any=[0x0, 0x0, 0x0, 0x0, 0x0, 0x9e], 0x0, 0x2}, 0xe) [ 492.119617][T13588] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.3'. [ 492.125499][T13586] validate_nla: 2 callbacks suppressed [ 492.125511][T13586] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:14 executing program 2: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c460000000000000000000000000200da"], 0x13) close(r0) clone(0xf132800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 22:31:14 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x5) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) set_robust_list(&(0x7f0000000200)={&(0x7f0000000000), 0x20, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d24f80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60106800000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:14 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x14}, 0x0, 0x1}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) write$binfmt_elf32(r2, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0xff, 0x7, 0x2, 0x1ff, 0x2, 0x6, 0xf7, 0x10e, 0x38, 0x2fa, 0x0, 0x40, 0x20, 0x1, 0x200, 0x4, 0xb55}, [{0x2, 0x0, 0x40, 0x0, 0x9, 0x7, 0x974d, 0x9238}, {0x6474e551, 0x7, 0x20, 0x7, 0x3, 0x5, 0x7ca5fad6, 0xca1}], "9ff3283eb583929f685e8c88d6c8eb76b2803172a05ce27249ecf857279a578520595693b1abd33bcdb309d35804b459489e2af0d4cc90a3fbf993dfa25605c8ddcbf58a9ee58e8bb420807ebea3b4fecfde80d75bb6847e6e4ffc0c74c63b9b7c294718b603ff12b05ce4faa933aeb318dd63efe74396a0883855efcb414b91854eade2e415", [[], [], [], []]}, 0x4fe) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000000)='@\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) [ 492.473640][T13611] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:14 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x80002, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'bridge_slave_0\x00', &(0x7f00000002c0)=@ethtool_gfeatures={0x3a, 0x1, [{}]}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x10, 0x4c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r7 = openat$cgroup_ro(r0, &(0x7f0000000100)='memory.current\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="006df160a1c056a2d6213245"], 0xda00) r8 = socket$unix(0x1, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat(r9, &(0x7f0000000180)='./file0\x00', 0x10000, 0x0) fallocate(r10, 0x12, 0x0, 0x1) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$P9_RMKDIR(r11, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x20, 0x2, 0x6}}, 0x14) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) [ 492.532878][T13614] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:15 executing program 5: socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) 22:31:15 executing program 2: gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) 22:31:15 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDDISABIO(r3, 0x4b37) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25080648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60106c00000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:15 executing program 1: socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) [ 492.963872][T13632] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 492.979791][T13634] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:15 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socketpair(0x1a, 0x3, 0x32, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000080)={0x8000000, 0x86, 0x37}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x81}, 0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25180648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60107400000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:15 executing program 2: gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0xfffffff5) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) [ 493.293046][T13654] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 493.330669][T13655] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:15 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000000)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x244001, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000080)={0x20, 0x1d, 0xff, 0x200, "d0b262b2b9b72bcedf6a9a9cd43509d14fd52b8b94118b966d6168ae1caa0d28"}) 22:31:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25280648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:15 executing program 5: socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) 22:31:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60107a00000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 493.559099][T13665] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:16 executing program 1: socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) 22:31:16 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x1, 0x0, 0x0, 0xffff}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25380648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60102d01000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:16 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x505002, 0x0) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000180)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000000)={0x0, 0x2}) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') exit(0x0) preadv(r3, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/151, 0x97}], 0x1, 0x0) 22:31:16 executing program 0: set_mempolicy(0x2, &(0x7f0000000200)=0x2, 0xfffffffffffffff8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4b2000, 0x0) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000040)) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$capi20(r3, &(0x7f0000000080)={0x10, 0x7ff, 0x3, 0x80, 0x5, 0x5}, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) [ 493.917023][T13683] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25480648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 494.069186][T13690] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100003000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:16 executing program 0: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x120) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000240)={0x20, 0x2, 0x9, 0xffffffffffffff00, 0x95}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0xbb8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uhid\x00', 0x2, 0x0) close(r2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x0, 0x0, 0xff, 0x2, 0x151, 0x0, 0x9, 0x3, 0x8, 0x2, 0x2aaa, 0x2}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@deltaction={0x88, 0x31, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5c08}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40004}, 0x24008804) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) [ 494.171536][T13696] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:16 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x80041, 0x10) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f00000001c0)={0x6, 0x6c2f, 0x6, 0x7, 0x5}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000002000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e6700000000000000000000000000000000000000000000000000000018040000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000027327243426c7d2d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff00000000"]}, 0xa38) pipe(&(0x7f0000000140)) getresgid(&(0x7f0000000180), 0x0, 0x0) pipe(0x0) [ 494.292809][T13703] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 494.338667][T13703] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:16 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0185879, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25580648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 494.389655][T13707] ebt_among: dst integrity fail: 3cd [ 494.425022][T13707] ebt_among: dst integrity fail: 3cd 22:31:17 executing program 1: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x120) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000240)={0x20, 0x2, 0x9, 0xffffffffffffff00, 0x95}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0xbb8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uhid\x00', 0x2, 0x0) close(r2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x0, 0x0, 0xff, 0x2, 0x151, 0x0, 0x9, 0x3, 0x8, 0x2, 0x2aaa, 0x2}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@deltaction={0x88, 0x31, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5c08}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40004}, 0x24008804) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 22:31:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100005000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:17 executing program 2: socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) 22:31:17 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000200)={0x1, r1}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x100, 0xfffb, 0x7ff}, 'syz1\x00', 0x56}) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25680648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25780648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100006000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:17 executing program 2: socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) 22:31:17 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) 22:31:17 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0185879, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25880648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:17 executing program 1: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x120) ioctl$VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000240)={0x20, 0x2, 0x9, 0xffffffffffffff00, 0x95}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0xbb8) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uhid\x00', 0x2, 0x0) close(r2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x0, 0x0, 0xff, 0x2, 0x151, 0x0, 0x9, 0x3, 0x8, 0x2, 0x2aaa, 0x2}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1a0}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=@deltaction={0x88, 0x31, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5c08}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40004}, 0x24008804) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 22:31:17 executing program 2: socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) 22:31:17 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x182, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60102409000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25980648c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:17 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:18 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0185879, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 495.575056][T13767] __nla_validate_parse: 2 callbacks suppressed [ 495.575070][T13767] netlink: 9226 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:18 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'geneve1\x00', 0x7fff}) r4 = socket$inet6(0xa, 0x800, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0xe0c3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) 22:31:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010000a000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a800a8c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:18 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0185879, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:18 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010000e000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80238c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:18 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000007600007884a438b36ab86f9edfda4677b8b623222d2ec53e0711ee283a530e3e049b11ee19d0dbdbe7755bdd0d40bbda72d97a8696064fa229b26183d4e741bf7880a2789add46056cb462e798a297213ff21ab5022129db667a94689ee0bcd30143", @ANYRES32=r2, @ANYBLOB="0800809fa125f13d5af11cefbd206142"], 0x2c}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x14) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001980)='/dev/qat_adf_ctl\x00', 0x100000, 0x0) r5 = syz_genetlink_get_family_id$tipc(0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x21001020}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r5, 0x4, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x90) 22:31:18 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:18 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0185879, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80258c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100924000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:18 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:18 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={[], [], @broadcast}, 0x0, 0x1, 0xff}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) close(r3) r4 = socket(0x10, 0x80002, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="08002b000c00000005002f0000000000"], 0x2c}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x80010, r4, 0x8d76e000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r8, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, 0x0, 0x8, 0x401, 0x0, 0x0, {0xd, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9d2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 22:31:18 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a802a8c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 496.495404][T13817] netlink: 16138 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:19 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000000)={'geneve1\x00', 0x7fff}) r4 = socket$inet6(0xa, 0x800, 0x1) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0xe0c3, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) 22:31:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010012d000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:19 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:19 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="b042ace00400e6c30000", @ANYRES16=r2, @ANYBLOB="01000000000000709acded3f778f20810000", @ANYRES32=r1, @ANYBLOB="0a000900ffffffffffff000005002f0000000000"], 0x30}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000240)=""/181) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000040)=@sha1={0x1, "8c03e2d48d5f332fca618db4ad7d8913a6aaec41"}, 0x15, 0xcc7547c6832f0e22) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 22:31:19 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0185879, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a802b8c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 496.893030][T13840] netlink: 18186 bytes leftover after parsing attributes in process `syz-executor.3'. 22:31:19 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:19 executing program 1: mlock(&(0x7f00007f5000/0x2000)=nil, 0x2000) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x1, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000001c0)={0x0, 0x3f}) fcntl$setstatus(r1, 0x4, 0x42000) fchdir(r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r2 = open(0x0, 0x0, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000000100)=0xfffffffffffffe6b) r3 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000001400), &(0x7f0000001480)=0xfe3e) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x8, &(0x7f0000000280)) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000300)) utimes(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) 22:31:19 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x8) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x1, "450a1bc566c32c91a71b9e10e1fad17fe1d3cae7a90c718246bdf8264fca36cd", 0x1, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x80000, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = memfd_create(&(0x7f000003e000)='\'', 0x0) r4 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r5 = dup2(r4, r3) umount2(&(0x7f0000000240)='./file0\x00', 0x5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x80045301, &(0x7f00000001c0)={0x300, 0x1, {0x0, 0x3, 0xfa}, 0x9}) r6 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="6600000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc735b92de0e6392e2706ed317c2b6c5aaf257a2c2dedee8e1b57bb2c98141dcd6417c22d5159791888812083"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r7, 0x4) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 22:31:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100048000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a802d8c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:19 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 497.349697][T13864] validate_nla: 22 callbacks suppressed [ 497.349710][T13864] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 497.363554][T13866] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:19 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0x9}, 0x0) socketpair(0x3, 0x6, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x8, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}}, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 22:31:19 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a802e8c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:19 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:19 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0185879, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010004c000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 497.565921][T13873] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:20 executing program 1: mlock(&(0x7f00007f5000/0x2000)=nil, 0x2000) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r0 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x1, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000), 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f00000001c0)={0x0, 0x3f}) fcntl$setstatus(r1, 0x4, 0x42000) fchdir(r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) r2 = open(0x0, 0x0, 0x0) write$P9_RWALK(r2, &(0x7f0000000300)=ANY=[], 0x6) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, &(0x7f0000000100)=0xfffffffffffffe6b) r3 = open(&(0x7f0000001680)='./file0\x00', 0x0, 0x80) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000300), 0x12) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000001400), &(0x7f0000001480)=0xfe3e) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x8, &(0x7f0000000280)) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000300)) utimes(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) 22:31:20 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETXW(r1, 0x5435, &(0x7f0000000000)={0xfff9, 0x15fa, [0xff, 0x80, 0x6, 0x1f, 0x4], 0x924}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) [ 497.737556][T13883] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:20 executing program 2: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80308c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100060000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:20 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x402801, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) [ 498.040462][T13899] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 498.079777][T13901] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:20 executing program 2: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:20 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100068000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80588c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:20 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000200)={{0x1, 0x3, 0x80000001, 0xfffffff9, '\x00', 0x9}, 0x0, [0x2, 0x9, 0x1, 0x8, 0x8, 0xb0, 0xb6, 0x400, 0x91, 0x2, 0x0, 0x8, 0xff, 0x2, 0xfffffffffffffffc, 0x0, 0x7fff, 0x4, 0x78, 0x401, 0x8, 0x0, 0x5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x2, 0xffff, 0x9, 0x1, 0x112, 0x80000001, 0x94, 0x64d6, 0xc7cb, 0x4, 0x583, 0x9, 0xfff, 0x9, 0x8, 0x1, 0x9, 0x3, 0xf8, 0x5, 0x100000001, 0x0, 0x8, 0x0, 0x5753, 0x7, 0x4, 0x0, 0x8, 0x200, 0xd131, 0x5, 0x3ff, 0x4, 0x2800000000000000, 0x2, 0x7, 0x7, 0x1000000, 0xa4, 0x24, 0x401, 0x0, 0x100, 0x8, 0x2, 0x400, 0x0, 0x3, 0x20, 0x6, 0x400, 0x100, 0x25, 0xa64, 0x3, 0x10001, 0x8, 0x1f, 0x2, 0x0, 0x6, 0x5, 0x101, 0x2, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x3, 0x1, 0x7, 0x3ff, 0x10000, 0x6, 0x6, 0xd30, 0x4, 0x200, 0x6, 0x100000000, 0x800, 0x7, 0x10001, 0x7, 0x6, 0x5, 0x8001, 0x8, 0x5, 0x5, 0x4, 0x4, 0x5, 0x8000, 0x3, 0x3]}) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) [ 498.381972][T13913] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:20 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0xc0185879, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:20 executing program 2: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 498.479550][T13918] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010006c000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80638c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:21 executing program 2: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 498.719057][T13929] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 498.775420][T13933] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:21 executing program 0: r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000300)={@ll={0x11, 0xfa, 0x0, 0x1, 0xb2, 0x6, @random="bd1ca193cf4e"}, {&(0x7f00000001c0)=""/238, 0xee}, &(0x7f00000002c0), 0x4}, 0xa0) set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000040)={0x401, 0x5, 0x4, 0x40000000, 0x5, {r5, r6/1000+10000}, {0x4, 0x0, 0xdc, 0x2, 0x1f, 0x81, "3cb5d471"}, 0x6b, 0x2, @fd, 0x6, 0x0, 0xffffffffffffffff}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) renameat(r7, &(0x7f0000000140)='./file0\x00', r9, &(0x7f0000000180)='./file0\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000500)) 22:31:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100074000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80698c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:21 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 22:31:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010007a000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:21 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x6, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000000)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:21 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a806c8c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 22:31:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a806f8c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000025000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:21 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x3, 0x1, 0x1, 0xd}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 22:31:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80708c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:22 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000035000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:22 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x10d400, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000001200)) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_bulk={0x3, {0xf}, 0x3, 0x47, &(0x7f0000000200)="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", 0x1000, 0x2, 0x6, 0x8, 0x0, 0xfffffff7, &(0x7f0000000040)="15febdea14171cbe48c9ded8525b4cf247eff80cbe4e7ddf520581fd0ade35e1741f3e9267bb3e0c55af1dcae971798703b515"}) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000001300)={0x5, 0x2, &(0x7f0000001240)=[0xe973, 0x3], &(0x7f0000001280)=[0x7, 0x100, 0x7, 0x4, 0x8, 0x1, 0x5], &(0x7f00000012c0)=[0x4, 0x1ff, 0x51]}) bind$inet(r1, &(0x7f0000001340)={0x2, 0x4e21, @remote}, 0x10) socket$tipc(0x1e, 0x2, 0x0) 22:31:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 22:31:22 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80738c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 22:31:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100002000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80758c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:22 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x280180, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x90, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x61}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa01}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x88ba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2040000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8084}, 0x1404c040) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clock_gettime(0x0, &(0x7f0000000980)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000001540)={0xb0a3, 0x9, 0x4, 0x10, 0x3, {r2, r3/1000+10000}, {0x5, 0x1, 0x0, 0x7, 0xfb, 0x2, "2a7a4812"}, 0x6, 0x2, @fd, 0x29, 0x0, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f000003e000)='\'', 0x0) r6 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x80045301, &(0x7f00000001c0)) r8 = socket(0x1d, 0x80002, 0x9) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r11 = socket(0x10, 0x80002, 0x0) close(r11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r13, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r14 = accept4$inet6(r7, 0x0, 0x0, 0xc00) getsockopt$inet_sctp6_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) socket(0x1a, 0x805, 0xf7) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r15, @ANYBLOB="6600000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc735b92de0e6392e2706ed317c2b6c5aaf257a2c2dedee8e1b57bb2c98141dcd6417c22d5159791888812083"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r15, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000015c0)={0x1, 0x1, 0xffff, 0x0, r15}, &(0x7f0000001600)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000001640)={r16, 0x6, 0x30, 0x0, 0x4c48}, &(0x7f0000001680)=0x18) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) syz_mount_image$ceph(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)='./file0\x00', 0x4, 0x8, &(0x7f00000008c0)=[{&(0x7f0000000480)="8c75db8d682956a9a4226150e1eb94b269b5732b35917ef5e675a97eee2c4113cc623baed140b7b358e5792d433f6935521370d996ecce5a39bcd7012d4bc91e3211295dca50755901d6bfc845299fb44093794595b596d055f137044bafbf3b7fe4cf9ab9e2cc57a84924b09dfa0117e74d274b4dab80cb2783b7c4a1410f7b770cb2f85ed07bf72c2fe454cd76f1970d6ee6e0d5f65a42b4eed7db3834a6d8c8840c1249658a25b8ca8e7c3cad2e94ba872b392d1f5b55f51ae8bf7112f4a706c8037c17cdcd8ba34ea87adc6f97957e5b437ee0d547eed5340477211754fb2e1b37befb1921638b26af893e19", 0xee, 0x7f}, {&(0x7f0000000580)="e1a9230989257eea613089b14bf58bebfb85450787eb9b4f60286a64949346ca5632f88c3da29392ee4208a0dc54f090a7dcc8f1043acbbad6f55b422828f0fadcc2092c62e6e7ed9f765fa85b4ac77e6732a489bfa578786aa4def2b78869b7c158b9153d6c79678ab15535f6758d47255e473c64002a1041957b0814755309015c9a27f3bbeb0c51107d311e797b8f20bf8c3029eac8", 0x97, 0xffff}, {&(0x7f00000003c0)="afd220131fa88c844b558df12a71c1b0e2daf50d06db62b9da150ecf4094285274ad597ac3054eed1c169434a8d442456251334fc6b72c474f5f17ccae10", 0x3e, 0x6}, {&(0x7f0000000640)="82565255f4d827bda0c75465204a96773857d37e8d61da170cdf464994273e8face2b509b0d26e61c6730a7dc2d4549e57d0b12058219b666827058f3e9a4da64f902dcb484899c6c36939df64d1bce01f602c7ac55d18912cc7e8974f43b6be4f83a61654ffbd0ac8ff130bde87631d1fbee05895a54f433e119ab4efe30f07edec6605df7f6b5ae0df135be3ba0af729002cd03f25816b87f4822e9a08c52a91413ddda4d129d9552d0661e7d5c76a3324215e648156c80a48d6c8dc968e5e75b4e6973f4e07b1345d3b408592e958494741c5dfced287df079106d311fa59b69b9d39", 0xe4, 0x81}, {&(0x7f00000016c0)="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", 0x1000, 0x7fff}, {&(0x7f0000000740)="85104cf24d40e8306eceea635e090308058b4777426dd1d7b475a00d204a8b9dafcbfed8172850b5173eaa5ae103d04291f4c0ea7b51ae5e85a89a0410f6c07970169a7943ba3814db2ce4f0d0f578f4d37dc3d6934b0589c0c58f1ab733bf73efbf066875eb1e8d3e3c9b48664419f54966dce7b2c6d1de36254658abb888cc10b929f0f19dc61aa051566f0ec73538e36be0bc2d99941f4cde81065b53b9", 0x9f, 0xcd3c}, {&(0x7f0000000800)="6a72ed69bd73490d7d87e513caf88fb732a21720878c2ba7f5b55fa650b1e8d236f29359c853502760ba7e28c30adb2b956b755e93ad0e96d1631f8c5c8792fd30ddbd1517a7e3497c8d6d867a8c33ea1dd3cc70f515d6974416f5d8e66d7dec9549ca757b279cf71b385317161f7d6cad72f6dbf08d39bd4810df81db89f1d945392c28a4006b63c1580b982d", 0x8d, 0x1}, {&(0x7f00000026c0)="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", 0x1000, 0x7fd7}], 0x202080, &(0x7f0000000400)='/dev/vsock\x00') 22:31:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100003000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 22:31:23 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80788c63940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:23 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/timer\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000240)=0xfff, 0x4) 22:31:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 22:31:23 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100004000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 22:31:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c0a940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:23 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) 22:31:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c23940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100005000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:23 executing program 0: set_mempolicy(0x0, &(0x7f00000000c0)=0x2, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) init_module(&(0x7f0000000000)='+cpuset+cgroup\x00', 0xf, &(0x7f0000000040)='ppp1^,selinux\x00') r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000200)="0642621ee1cdb57439da9c34e1c6bdfc2d04b555bd840f6c8b2613f1586ab542b2b28fcb93f87d944e073cc4d13ad739de8b3f1c697668d2e92f9cc47f2c692c41155c0ece581de855b17a6e8038fa09b2c027794d1657a4eea03d7f5d415a7a53b137c8") r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 22:31:23 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 22:31:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c25940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100006000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:24 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:24 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) 22:31:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 22:31:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c2a940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c2b940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 22:31:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010000a000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:24 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:24 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xfc, 0x200}, 0xc) set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000440)=0x8, 0x4) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="47dbd1934ac745228dbe1057d0d347ed78000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300c90038dc928c4b3a485cd6db913ad3f19eaf870a890a142220f2b72863dc8038001e3ce1b03e7c1085db516a0d4a6ae982346cd6fb3b4fccdb7d5c3bd49dc6cf68a0d986769d0b19fde6f0ca350bca99b9fc7784778089da6b76cb92a777f48757b5dfba656b447b002819fee7a5f72e26e27f0659fed6c01b105b1f20caeb84a936079477a4763f299c668d9456fd841bead77e606d4ac901c8e56b6ed8a7bb31bd470c048729ca2a277032b1b7ca92d30551f1ba60807b07e381b55994385196b16ac38f8a995db84cf41fb1cafead191509ad9f6cc8", @ANYRES32=r1, @ANYBLOB="08002b000000000005002f0000000000"], 0x5}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="800000000202010300000000000000000a0000066c0001801400018008000100e000000208000200ac1e01012c00018014000300fe80000000000000000000000000003814000400ff010000000000000000000000000001060003400001000006000340000000000c000280050001002f0000000c0023fb7c05d1aa836157222b6c07c402800511000000000000"], 0x80}, 0x1, 0x0, 0x0, 0x20040094}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000280)='veth0_vlan\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000400)=0x4) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r5, 0x806c4120, &(0x7f0000000200)) 22:31:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c2d940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010000e000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:24 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c2b940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 22:31:24 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x202001, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 22:31:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100048000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c2e940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:25 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0xfc}, 0x0, 0x2, 0x0, 0x1, 0x0, 0x4}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:25 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 502.627188][T14122] validate_nla: 28 callbacks suppressed [ 502.627201][T14122] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 502.643979][T14126] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 502.645562][T14125] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 22:31:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 22:31:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010004c000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c30940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:25 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 22:31:25 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) eventfd2(0x4, 0x801) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) [ 502.945517][T14141] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 502.955580][T14140] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100060000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c58940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) [ 503.256474][T14156] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100068000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 503.304625][T14158] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:25 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x1e}, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$unix(0x1, 0x5, 0x0) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[&(0x7f00000002c0)='/dev/dlm-monitor\x00'], &(0x7f0000000400)=[&(0x7f0000000340)='/dev/dlm-monitor\x00', &(0x7f0000000380)='/dev/dlm-monitor\x00', &(0x7f00000003c0)='/em0-\x00']) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000500)='security.capability\x00', &(0x7f0000000540)=@v1={0x1000000, [{0x7f, 0x4}]}, 0xc, 0x3) umount2(&(0x7f0000000480)='./file0\x00', 0x8) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000200)=""/81) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x294800, 0x0) getsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) close(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000004c0)={0x401, 0x6, 0x81, 0x1}, 0x8) r8 = fcntl$dupfd(r4, 0x0, r4) msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) read$eventfd(r8, &(0x7f0000000440), 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:25 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c64940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007", 0x17}], 0x1}, 0x0) [ 503.508841][T14165] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010006c000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 503.627190][T14172] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:26 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007", 0x17}], 0x1}, 0x0) 22:31:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c69940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100074000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 503.809913][T14179] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:26 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000040)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r2 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x7f, 0x188000) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000240)={0x0, 0x0, @ioapic}) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) close(r6) r7 = socket(0x10, 0x80002, 0x0) close(r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r9, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r10 = memfd_create(&(0x7f000003e000)='\'', 0x0) r11 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r12 = dup2(r11, r10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r12, 0x80045301, &(0x7f00000001c0)) r13 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r13, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r12, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r14, @ANYBLOB="6600000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc735b92de0e6392e2706ed317c2b6c5aaf257a2c2dedee8e1b57bb2c98141dcd6417c22d5159791888812083"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r14, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000480)={r14, 0x2}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000500)={r15, 0x81, 0x6, [0x2, 0x2, 0x80, 0x3, 0x0, 0x200]}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r17, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) accept$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) connect$packet(r3, &(0x7f00000005c0)={0x11, 0x1a, r18, 0x1, 0x9, 0x6, @random="74b184cadd61"}, 0x14) 22:31:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c6c940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007", 0x17}], 0x1}, 0x0) 22:31:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010007a000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:26 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c6f940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:26 executing program 0: set_mempolicy(0x8000, &(0x7f0000000040)=0x100000001, 0x3f) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000000)=0x202, 0x4) 22:31:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e", 0x23}], 0x1}, 0x0) 22:31:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c70940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010002d010a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e", 0x23}], 0x1}, 0x0) 22:31:27 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:27 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000080)={0x0, 0x7}) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000000)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$unix(0x1, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f0000000040)) r7 = socket$unix(0x1, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = socket$unix(0x1, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) r11 = socket$unix(0x1, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$unix(0x1, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = socket$unix(0x1, 0x1, 0x0) r16 = fcntl$dupfd(r15, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = perf_event_open$cgroup(&(0x7f0000000340)={0x1, 0x70, 0xff, 0x80, 0x7f, 0x20, 0x0, 0xffff, 0x22215, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000300)}, 0x5298ce2cd86340e7, 0x4, 0x8, 0x0, 0xc4, 0x2, 0x9}, r14, 0x6, r16, 0xe) ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x1) r18 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r18, 0x12, 0x3, &(0x7f00000002c0)=0x8, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x6) mq_timedreceive(r8, &(0x7f0000000200)=""/113, 0x71, 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 22:31:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000030a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e", 0x23}], 0x1}, 0x0) 22:31:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c73940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:27 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:27 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r1, @ANYBLOB="08002bf1ffffffff04002f0000000000"], 0x2c}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev, 0xff, 0x1, 0x2}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 22:31:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000050a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180fe", 0x29}], 0x1}, 0x0) 22:31:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c75940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000060a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:27 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0x2, 0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:27 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180fe", 0x29}], 0x1}, 0x0) 22:31:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c78940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000070a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:28 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) bind$tipc(r0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) 22:31:28 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180fe", 0x29}], 0x1}, 0x0) 22:31:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c6394120224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100024090a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000", 0x2c}], 0x1}, 0x0) 22:31:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c6394350224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:28 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x1, 0x0, 0x8}, 0x0) r0 = getpid() execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x95fa, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/11) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x400, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f0000000080)={0x3, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x84000, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$unix(0x1, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f0000000240)={0xd, 0x5, 0x25a}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x7) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x80000000000, 0x400) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket(0x10, 0x80002, 0x0) close(r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r12, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r13 = dup3(r10, r8, 0x80000) dup2(r13, r9) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r14 = socket(0x10, 0x80002, 0x0) close(r14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r16, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r17 = socket(0x10, 0x80002, 0x0) close(r17) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r17, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r17, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r19, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r18}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) eventfd2(0x5, 0x801) r20 = socket(0x10, 0x80002, 0x0) close(r20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r20, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r22 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r20, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r22, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r21}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r20, 0x400452c8, &(0x7f0000000380)) 22:31:28 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000", 0x2c}], 0x1}, 0x0) 22:31:28 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000a0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:28 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63945a0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:28 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe2$9p(&(0x7f0000000000), 0x84000) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000d48fdc5c", @ANYRES32=r1, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200, 0x0) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) close(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r8, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000400)) 22:31:28 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:28 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000", 0x2c}], 0x1}, 0x0) 22:31:29 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000e0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:29 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000002c0)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x8040, 0x0) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x101, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x1, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) r5 = syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x5, 0x309000) ioctl$VIDIOC_G_FBUF(r5, 0x8030560a, &(0x7f00000003c0)={0x40, 0x2a, &(0x7f0000000340)="f0cb44194ba3282f36b64920319324804092ff7fd550a6d4964b3052add5741e1a2094f33fbe914d2111c272e2551d133fed72a47aedd032f4739ed475a63bb2d17f60570fe36e2cb26eb088a70426a9c85ea6af522442d995562bae165e062dde", {0x10001, 0x1f, 0x32314d59, 0x5, 0x80000001, 0x3, 0x0, 0xfeee}}) 22:31:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0324fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1", 0x2d}], 0x1}, 0x0) 22:31:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d3524fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:29 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:29 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100009240a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:29 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x1, 0x7f, {0x0, 0x2710}, {0x2, 0x2, 0x7, 0x69, 0x7, 0x2, "64d4333b"}, 0x100, 0x4, @offset=0x7fffffff, 0x8, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r4, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 22:31:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d5a24fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1", 0x2d}], 0x1}, 0x0) 22:31:29 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:29 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000012d0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1", 0x2d}], 0x1}, 0x0) 22:31:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0235fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:29 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket(0x3, 0x1, 0x9) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) write$capi20_data(r0, &(0x7f0000000040)={{0x10, 0x7, 0x83, 0x81, 0xfff}, 0x1, "11"}, 0x13) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x2, 0xfff1}}}, 0x24}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000000)={@local, r4}, 0x14) [ 507.649575][T14367] validate_nla: 22 callbacks suppressed [ 507.649605][T14367] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 507.672369][T14368] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63945a0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d025afc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 507.810025][T14374] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 507.913879][T14379] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:30 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000480a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:30 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:30 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r2, 0x1, 0xfffffffffffff000, 0x1000000000000}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$unix(0x1, 0x1, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x2000, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r8, 0x30, 0x0, @ib}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000240)={0x7, 0x8, 0xfa00, {r8, 0x1}}, 0x10) r9 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r9, 0xc02c5341, &(0x7f0000000340)) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c8, &(0x7f0000000100)) socket$unix(0x1, 0x1, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$PPPIOCSFLAGS1(r12, 0x40047459, &(0x7f0000000080)) r13 = socket$unix(0x1, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x40082406, &(0x7f0000000280)='\x00') r15 = socket(0x10, 0x80002, 0x0) close(r15) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r17, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r18 = socket(0x10, 0x80002, 0x0) r19 = socket(0x10, 0x80002, 0x0) close(r19) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r19, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r21 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r19, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r21, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r20}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) close(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r18, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r23 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r23, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r22, @ANYBLOB="0800008000000014bd3e34e3ae13a90004002f0000000000cb0417ee387055cc38a8d95a6f"], 0x5}}, 0xd0b092653aea481e) r24 = socket(0x10, 0x80002, 0x0) close(r24) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r24, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r26 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r24, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r26, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r25}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) socket$inet6(0xa, 0x1, 0x9) r27 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r28 = fanotify_init(0x0, 0x5032e8cc103afd) r29 = fcntl$dupfd(r27, 0x406, r28) ioctl$PERF_EVENT_IOC_ENABLE(r29, 0x8912, 0x400200) ioctl$RTC_EPOCH_SET(r29, 0x4008700e, 0x9) 22:31:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c30940d0224fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d02c0fc60100000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 508.129664][T14389] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 508.136301][T14388] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 508.167218][T14392] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000004c0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:30 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60020000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 508.319624][T14401] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000600a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 508.367098][T14406] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60030000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 508.514640][T14416] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:31 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 508.656247][T14421] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:31 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:31 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000680a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:31 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x9, 0x17, 0x10001, 0xffffffff}, 0x10) set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000340)="f3c79bc48894f5cbfe0eb6b67ca24993dc856fcd52cdcb1c09eee0a65876f7921067") fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000080)=0x1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(r3, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000020101020000000000000000030000000800154000000801b6b002008100"/52], 0x34}, 0x1, 0x0, 0x0, 0x4040087}, 0x4) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 22:31:31 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:31 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60040000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 508.960003][T14434] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:31 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001340)='/dev/sequencer2\x00', 0x10000, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001380)=@req={0xed, 0x2, 0x2, 0x400}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_MCE_KILL_GET(0x22) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 22:31:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60050000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:31 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000006c0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:31 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 509.273616][T14451] netlink: 4874 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60060000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:31 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000740a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 509.564300][T14462] netlink: 4874 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:32 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:32 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) open(&(0x7f0000000400)='./file0\x00', 0x82480, 0x3) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x121000) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x55dc3) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x80045301, &(0x7f00000001c0)) r4 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="6670000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce5ff000000000000002de0e6392e2706ed317c2b6c5aaf257a2c2dedee8e1b57bb2c98141dcd6417c22d51597918888120830000000000000030479ca244"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r5, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r5, @in={{0x2, 0x4e20, @remote}}, 0x9}, 0x90) r6 = socket(0x10, 0x80002, 0x0) close(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r7, 0x100, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r8 = memfd_create(&(0x7f000003e000)='\'', 0x0) r9 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r10 = dup2(r9, r8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x80045301, &(0x7f00000001c0)) r11 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r12, @ANYBLOB="6600000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc735b92de0e6392e2706ed317c2b6c5aaf257a2c2dedee8e1b57bb2c98141dcd6417c22d5159791888812083"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r12, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000480)={r12, 0xbf, "88664ed393ad272348b6b31127b1cd353234f9b6925327a9902bcd6bea03e013f867b55df17d1fe651a11ecf11913a838ac6411aef0d331679c0e579b588c6f00825322429587bff5dbfc07d98bd49cff4fce8f9293eb0f992529c55a1fe2e4108d181dae388e1589f3c2ce1dcfef46007d548f44343f9ad345fd5acb2cd78eaa2fa385c4f777cdfe6f01de2c4674a313c277d34fe6f554262c7d1602220a891def1fd8eade7ca3920a87520b2eaa5690cb67edf7e20ce203b0bdf3a2e2d14"}, &(0x7f0000000040)=0xc7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r13, 0x400452c8, &(0x7f0000000100)) 22:31:32 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:32 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000007a0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60070000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:32 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 509.839622][T14475] netlink: 4874 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60080000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000020a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:32 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:32 executing program 0: r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x3) set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x1}, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0xffffffffffffffff, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) [ 510.110706][T14487] netlink: 4874 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60090000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 510.366051][T14499] netlink: 13014 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:32 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:32 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000030a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:32 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) iopl(0x7) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:32 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc600a0000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:32 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:32 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000340)=0xfe00, &(0x7f0000000400)=0x2) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRES16=r3], 0x1}, 0x1, 0x0, 0x0, 0x84}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x80) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x1, 0x0, 0xe}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) fsetxattr(r1, &(0x7f0000000200)=@known='com.apple.FinderInfo\x00', &(0x7f0000000240)='batadv\x00', 0x7, 0x1) [ 510.646391][T14514] netlink: 13014 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:33 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="b042ace00400e6c30000", @ANYRES16=r2, @ANYBLOB="01000000000000709acded3f778f20810000", @ANYRES32=r1, @ANYBLOB="0a000900ffffffffffff000005002f0000000000"], 0x30}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000240)=""/181) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000040)=@sha1={0x1, "8c03e2d48d5f332fca618db4ad7d8913a6aaec41"}, 0x15, 0xcc7547c6832f0e22) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 22:31:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000040a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc600b0000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:33 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0xa8, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f30}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5d8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000}, 0x10) [ 510.952013][T14527] netlink: 13014 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:33 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="b042ace00400e6c30000", @ANYRES16=r2, @ANYBLOB="01000000000000709acded3f778f20810000", @ANYRES32=r1, @ANYBLOB="0a000900ffffffffffff000005002f0000000000"], 0x30}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000240)=""/181) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000040)=@sha1={0x1, "8c03e2d48d5f332fca618db4ad7d8913a6aaec41"}, 0x15, 0xcc7547c6832f0e22) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) 22:31:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000050a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:33 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc600c0000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:33 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:33 executing program 0: set_mempolicy(0x2, &(0x7f0000000000)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x0, 0x1, 0x3, 0xf, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000060a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:33 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="b042ace00400e6c30000", @ANYRES16=r2, @ANYBLOB="01000000000000709acded3f778f20810000", @ANYRES32=r1, @ANYBLOB="0a000900ffffffffffff000005002f0000000000"], 0x30}}, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000240)=""/181) fsetxattr$security_evm(r0, &(0x7f0000000080)='security.evm\x00', &(0x7f0000000040)=@sha1={0x1, "8c03e2d48d5f332fca618db4ad7d8913a6aaec41"}, 0x15, 0xcc7547c6832f0e22) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) [ 511.427251][T14548] netlink: 13014 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:33 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000030a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:33 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x14000, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000080)={0x8719, 0x5, 0x89e1, 0x0, 0x3}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe, 0x1010, r1, 0x80000000) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3a, 0xe0b00) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 22:31:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000070a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc600d0000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:34 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc600e0000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:34 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:34 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) bind$pptp(r0, &(0x7f00000002c0)={0x18, 0x2, {0x3, @multicast2}}, 0x1e) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x38, r5, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xe, 0xa, "bd909789d0504fc4cd71"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4d689b6d32067408}, 0x20040000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000300), 0x2) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) 22:31:34 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000a0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:34 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60110000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:34 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0xf2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000e0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60120000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:34 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="0f00000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:34 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket(0x10, 0x80002, 0x0) close(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="dca2e574", @ANYRES16=r8, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="090090cb4f08f6417aebf0427d3951977c7fad4f0000000000004ac600000000"], 0x2c}}, 0x0) ftruncate(r6, 0x6a62) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x3, 0x1, 0x4, 0x800, 0x38, {r1, r2/1000+30000}, {0x3, 0x1, 0x5, 0x1, 0x1, 0xfd, "7280d7e0"}, 0x31800000, 0x1, @fd, 0x3, 0x0, r3}) ioctl$EVIOCGABS2F(r9, 0x8018456f, &(0x7f0000000200)=""/160) 22:31:35 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:35 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000480a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 512.852331][T14618] validate_nla: 17 callbacks suppressed [ 512.852342][T14618] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:35 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x200, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x3, 0x4}, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0xffff}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000000)='/dev/kvm\x00', r1}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000000)='procsystem#em1%md5sumcpuset-ppp1\x00', r1}, 0x30) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8, 0x14000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket(0x10, 0x80002, 0x0) close(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r8, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000280)='!%[systemselinuxem1+systemsecuritykeyring\x00', 0x0, r6) 22:31:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc602f0000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:35 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="3548000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:35 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f0000000440), 0x800) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000003c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) unlink(&(0x7f00000001c0)='./bus/file0\x00') r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) recvfrom(r1, &(0x7f0000000080)=""/21, 0x15, 0x40, &(0x7f00000000c0)=@x25={0x9, @remote={[], 0x1}}, 0x80) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') r4 = socket(0x10, 0x80002, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000180)={{r0}, 0x101, 0xebb2, 0x8}) 22:31:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000004c0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 513.323497][T14629] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 513.339770][T14630] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:35 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 513.376719][T14629] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 22:31:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60350000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 513.423890][T14629] __nla_validate_parse: 3 callbacks suppressed [ 513.423900][T14629] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000600a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:35 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2800, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x1, 0x2}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) 22:31:36 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 513.605703][T14643] netlink: 18402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 513.634834][T14644] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 513.686294][T14646] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 22:31:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc605a0000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000680a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 513.768345][T14652] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:31:36 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/189, 0xbd) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r4 = socket(0x10, 0x80002, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r7 = dup3(r1, r4, 0x0) ioctl$RTC_PLL_GET(r7, 0x80207011, &(0x7f0000000200)) [ 513.826505][T14652] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 513.883242][T14652] netlink: 194480 bytes leftover after parsing attributes in process `syz-executor.2'. [ 513.902102][T14658] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:36 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', &(0x7f0000000440), 0x800) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) creat(&(0x7f00000003c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) unlink(&(0x7f00000001c0)='./bus/file0\x00') r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) recvfrom(r1, &(0x7f0000000080)=""/21, 0x15, 0x40, &(0x7f00000000c0)=@x25={0x9, @remote={[], 0x1}}, 0x80) link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00') r4 = socket(0x10, 0x80002, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000180)={{r0}, 0x101, 0xebb2, 0x8}) [ 513.943943][T14660] netlink: 18366 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:36 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48020028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601a4800000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000006c0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:36 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:36 executing program 0: set_mempolicy(0x2, &(0x7f0000000200)=0x2, 0x8000000002) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) [ 514.232704][T14674] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 514.246949][T14669] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:31:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60586500000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 514.297573][T14669] netlink: 131070 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:36 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48030028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:36 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="33000000190081ae08060c04000f000480207f03fe04dcc797cf546f030009001300000000006596bc014e18bbdfede6efb408", 0x33}], 0x1, 0x0, 0x0, 0xf00}, 0x0) r3 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r4 = dup2(r3, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x80045301, &(0x7f00000001c0)) r5 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB="6600000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc735b92de0e6392e2706ed317c2b6c5aaf257a2c2dedee8e1b57bb2c98141dcd6417c22d5159791888812083"], 0x0) recvmsg$can_raw(r4, &(0x7f0000000900)={&(0x7f0000000340)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000480)=""/188, 0xbc}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/253, 0xfd}, {&(0x7f0000000740)=""/169, 0xa9}], 0x5, &(0x7f0000000800)=""/198, 0xc6}, 0x102) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r6, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r6, 0x32}, &(0x7f0000000040)=0x8) 22:31:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000740a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 514.446262][T14684] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.4'. [ 514.539095][T14690] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'. 22:31:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48040028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000007a0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 514.596450][T14694] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.0'. 22:31:37 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60008100000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:37 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x40800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000040)={0x20, 0x0, 0xffffffee, {0xff, 0x57}, 0x2, 0x81}) 22:31:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e480a0028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 514.804106][T14702] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:37 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000025000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60900000200a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:37 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)={0x2, 0x0, 0x3a, 0x0, 0x5a, 0x2, 0x80, 0x6, 0x6, 0xfe, 0x0, 0xb1, 0x0, 0x7ff, 0x1ff, 0x3f, 0xd4, 0x7d, 0x5, [], 0x80, 0x9}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) [ 515.073640][T14718] netlink: 18314 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000035000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e480e0028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000001000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000025000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:38 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e480f0028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:38 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket(0x10, 0x80002, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="08002b000000000005002f0000000000c64c6799dc628103005d6ca33d4a077ee5426296962415de5484c05698ab9a4ce54eb3d9cf57d668a45e034fb49167ef6184208673618de562de73eede06a55d1332a91e0d9a37efc9de5e3047df8fb5ffc1f15a0634a5027c65a452ebed9759b84ba2e1eeebe829dc7a388bd4519d8d4d"], 0x2c}}, 0x0) r6 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000004000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000035000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:38 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48600028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100200000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a020000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:38 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48d70228000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a030000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:38 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:38 executing program 0: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x1}, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100300000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:38 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000328000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a040000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100400000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000a28000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:39 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) prctl$PR_SET_FPEXC(0xc, 0x100000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a050000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000e28000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:39 executing program 0: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) 22:31:39 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a060000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100500000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000f28000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:39 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a070000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48006028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100600000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a0a0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:40 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e4802d728000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100700000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:40 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 517.872839][T14842] validate_nla: 15 callbacks suppressed [ 517.872851][T14842] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:40 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:40 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e4800000f000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100a00000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a0e0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:40 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000228000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100e00000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 518.198728][T14859] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a480000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:40 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:40 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000328000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 518.469916][T14869] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:40 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100f00000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:41 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000428000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a4c0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 518.689120][T14877] __nla_validate_parse: 8 callbacks suppressed [ 518.689133][T14877] netlink: 14602 bytes leftover after parsing attributes in process `syz-executor.4'. [ 518.801004][T14881] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:41 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60104800000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:41 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000a28000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a600000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:41 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 518.970980][T14885] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:41 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000e28000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60104c00000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 519.081334][T14891] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a680000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:41 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000f28000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 519.315762][T14901] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.4'. [ 519.359712][T14908] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a6c0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:41 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48006028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:41 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60106000000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 519.568084][T14915] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 519.595612][T14917] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:42 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:42 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000035000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a740000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60106800000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:42 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 519.868437][T14924] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 519.916251][T14925] netlink: zone id is out of range [ 519.925118][T14927] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.4'. [ 519.956489][T14925] netlink: del zone limit has 8 unknown bytes 22:31:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a7a0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60106c00000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:42 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e4800003f000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 520.212488][T14939] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 520.226219][T14940] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:42 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0xc01, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x1}, 0x0, 0x5, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000006c0)}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x9, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x2f}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r4, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x20080, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x80002, 0x0) close(r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r9 = accept4$netrom(r1, &(0x7f00000009c0)={{0x3, @rose}, [@bcast, @netrom, @remote, @default, @null, @netrom, @null, @default]}, &(0x7f0000000a40)=0x48, 0x800) r10 = socket$unix(0x1, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket(0x10, 0x80002, 0x0) close(r12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r14, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) r16 = fcntl$dupfd(r15, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r18 = socket$unix(0x1, 0x1, 0x0) r19 = fcntl$dupfd(r18, 0x0, r18) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) io_submit(0x0, 0x6, &(0x7f0000000dc0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000780)="ec2deac9afa2cfd1008ffe9d9532d9bd8b7401bc8d8a885272a2c28eb9ad75fcc76eee08296b34af39be45704f29395acfdf390e923fe7461ce3058ffabb2ab1390d996d8fc480b02cdb91a125ee4c48f2ef1c80405a564fdf2753efc25e64e7644f22fd4d809e09", 0x68, 0x1, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0xb721, 0xffffffffffffffff, &(0x7f0000000800)="a6566bc8b731e776fb621044ca2b583147f657982637c2a3e76d3c46a18c9c8554665b6e5e6753ae268f7381e6b00346cee1bb959151c8897992dcc5807673ab88a7682e393bddadaab8a2a3de3faa98f444debad6bb272ada03463a380ac28d547553a021d223ef0e13d4b12111d42ec30eade9a47b8114073d44d472b59769c6a663543c460050178b82ab4b22dd728f20e85750ca1cb061aad79b516b5ed1cde524de052a03366ea035b6b07c3785023673af546b4164ea5636ea150763aa38ef3867b5f01aa180732223ad4c2c4bdea7a4be13e881c7afee79fe8cb81c1c4df5d86de9e28283ad12295cc458b1eb4f", 0xf1, 0x0, 0x0, 0x2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x8001, r7, &(0x7f0000000900)="6bbdc4250fd6ef626ef14bb631fe43021d25bf586043d878b8311b1ee7d126a8fa69bc90aced7088d722af5b740f33c4a47ccf097e5686ed3192c035efe9b540f0f3", 0x42, 0x4, 0x0, 0x7}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x7, 0x6, r9, &(0x7f0000000a80)="683ad17ba32d83588256a9c01c13e7fac73f06ac88459034f3968a10eea2f19ea05afe7bc4e27dd426cbc64a5053a33f31c55e330fe66f1e131a5c90ea9b5138572279c586fa73ecaa0cdef52d09c0a4e7f1e7d582505427ac41ef70abc258a48bda6e4ac03a0376e7bf004501a9325b92b921c868cfdde1ac9e103f97b99ed8cc04e1e2fa7dcfc860719eace50095fa25327d211dd55ea7968b389dbd06114658d25121cdeeb7640314bfc51a3111f309d5b42e748dd1498244fdfeb98f10ec2520681391fddb7b6c6b65489e9f62ea79ec6a61f1178def4d8f03901073fe2eec5207dcadb7bd0092a2682263ecce4706fa7582af32168c37dc60d502b8", 0xfe, 0x9, 0x0, 0x0, r11}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x8000, r12, &(0x7f0000000bc0)="f0001ddbddf7183262a49c94ad63836ab1aa679003f534b8fdb8597093e262759adbc54f5c8ddb541598b5c2ae9641d610488c3c1bb85179e630b7c278cf39cdd20dc3911c896d1f8935e9a5a012c2ad1955639f80376d8ef69b730b13", 0x5d, 0x5, 0x0, 0x0, r16}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, r17, &(0x7f0000000c80)="b630ee3e78fabc996f0115ed13d00f558e8ff7b96125e8d4615bfd9ca50cc6d016f0d24c746653d89593e7f4c1167e4153c738242cebc083675f2398f20f83dcb587d0b5dd5f6dc1f7efe4ea5ea4175ebc2b5ddc0d5c31a3946a85deead42b6088e1901fe266960b3c348bd9d5395e14f25ab8f55e17e48d35e72f6b4fb51cee18fdc19338f0a8d67110db502ddcfa9fe55bb0a7b8f29c3d3afec4c75f169863aaf212ce4b7fbc8a38511fc08388b5c170b03994b37d0890e1ae9eb198997ecd09c56db034e466c9fb5bbe6f684cb4107b8fc817f672c95a043e1457ba6c3f3635a88916af00c8a444808e78", 0xec, 0x1, 0x0, 0x1, r19}]) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, [], 0x0, 0x10, r0, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0xffffff89, 0x10, &(0x7f00000001c0)={0x0, 0xe, 0xfff, 0x9}, 0x10, r2, r6}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/3, 0x3, r2}}, 0x10) r21 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r22 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r22, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r21, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x501000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="380103729a87007ec0136d9265eddc22b48cf0880c9b6d400cbed62bacd09679e3fb9890b27b45a9fb173fc133b97311698bdfb2aa9995259375c643bce21c2be852d6be0b3d7170561cae2482ea", @ANYRES16=r21, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000040) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r20, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r23 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r23, 0x400452c8, &(0x7f0000000100)) 22:31:42 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e4800000f000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:42 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60107400000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:42 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a2d0100053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 520.465157][T14948] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:43 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a7a0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:43 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60107a00000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 520.646202][T14952] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:43 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000035000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:43 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r5 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000000)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) [ 520.837689][T14963] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:43 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000300053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 520.890560][T14966] netlink: zone id is out of range [ 520.945585][T14966] netlink: del zone limit has 8 unknown bytes 22:31:43 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0xc01, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x8}, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x1}, 0x0, 0x5, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000006c0)}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xc0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x1, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x9, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x2f}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r4, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x20080, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x80002, 0x0) close(r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r9 = accept4$netrom(r1, &(0x7f00000009c0)={{0x3, @rose}, [@bcast, @netrom, @remote, @default, @null, @netrom, @null, @default]}, &(0x7f0000000a40)=0x48, 0x800) r10 = socket$unix(0x1, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket(0x10, 0x80002, 0x0) close(r12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r14, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) r16 = fcntl$dupfd(r15, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r18 = socket$unix(0x1, 0x1, 0x0) r19 = fcntl$dupfd(r18, 0x0, r18) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) io_submit(0x0, 0x6, &(0x7f0000000dc0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffe1, 0xffffffffffffffff, &(0x7f0000000780)="ec2deac9afa2cfd1008ffe9d9532d9bd8b7401bc8d8a885272a2c28eb9ad75fcc76eee08296b34af39be45704f29395acfdf390e923fe7461ce3058ffabb2ab1390d996d8fc480b02cdb91a125ee4c48f2ef1c80405a564fdf2753efc25e64e7644f22fd4d809e09", 0x68, 0x1, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0xb721, 0xffffffffffffffff, &(0x7f0000000800)="a6566bc8b731e776fb621044ca2b583147f657982637c2a3e76d3c46a18c9c8554665b6e5e6753ae268f7381e6b00346cee1bb959151c8897992dcc5807673ab88a7682e393bddadaab8a2a3de3faa98f444debad6bb272ada03463a380ac28d547553a021d223ef0e13d4b12111d42ec30eade9a47b8114073d44d472b59769c6a663543c460050178b82ab4b22dd728f20e85750ca1cb061aad79b516b5ed1cde524de052a03366ea035b6b07c3785023673af546b4164ea5636ea150763aa38ef3867b5f01aa180732223ad4c2c4bdea7a4be13e881c7afee79fe8cb81c1c4df5d86de9e28283ad12295cc458b1eb4f", 0xf1, 0x0, 0x0, 0x2}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x8001, r7, &(0x7f0000000900)="6bbdc4250fd6ef626ef14bb631fe43021d25bf586043d878b8311b1ee7d126a8fa69bc90aced7088d722af5b740f33c4a47ccf097e5686ed3192c035efe9b540f0f3", 0x42, 0x4, 0x0, 0x7}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x7, 0x6, r9, &(0x7f0000000a80)="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", 0xfe, 0x9, 0x0, 0x0, r11}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x8000, r12, &(0x7f0000000bc0)="f0001ddbddf7183262a49c94ad63836ab1aa679003f534b8fdb8597093e262759adbc54f5c8ddb541598b5c2ae9641d610488c3c1bb85179e630b7c278cf39cdd20dc3911c896d1f8935e9a5a012c2ad1955639f80376d8ef69b730b13", 0x5d, 0x5, 0x0, 0x0, r16}, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x0, r17, &(0x7f0000000c80)="b630ee3e78fabc996f0115ed13d00f558e8ff7b96125e8d4615bfd9ca50cc6d016f0d24c746653d89593e7f4c1167e4153c738242cebc083675f2398f20f83dcb587d0b5dd5f6dc1f7efe4ea5ea4175ebc2b5ddc0d5c31a3946a85deead42b6088e1901fe266960b3c348bd9d5395e14f25ab8f55e17e48d35e72f6b4fb51cee18fdc19338f0a8d67110db502ddcfa9fe55bb0a7b8f29c3d3afec4c75f169863aaf212ce4b7fbc8a38511fc08388b5c170b03994b37d0890e1ae9eb198997ecd09c56db034e466c9fb5bbe6f684cb4107b8fc817f672c95a043e1457ba6c3f3635a88916af00c8a444808e78", 0xec, 0x1, 0x0, 0x1, r19}]) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, [], 0x0, 0x10, r0, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0xffffff89, 0x10, &(0x7f00000001c0)={0x0, 0xe, 0xfff, 0x9}, 0x10, r2, r6}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/3, 0x3, r2}}, 0x10) r21 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r22 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r22, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r21, 0xc573de0d27bdfe6f, 0x0, 0x0, {0x4}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x501000}, 0xc, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="380103729a87007ec0136d9265eddc22b48cf0880c9b6d400cbed62bacd09679e3fb9890b27b45a9fb173fc133b97311698bdfb2aa9995259375c643bce21c2be852d6be0b3d7170561cae2482ea", @ANYRES16=r21, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000040) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r20, 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r23 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r23, 0x400452c8, &(0x7f0000000100)) 22:31:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010d200000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:43 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x4}, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:43 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028020505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:43 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000500053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:43 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 521.263356][T14978] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:43 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100003000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:43 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028030505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:43 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket(0x10, 0x80002, 0x0) close(r1) getsockname$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@netrom, @default, @remote, @rose, @remote, @remote, @netrom, @netrom]}, &(0x7f0000000200)=0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, r2, 0x10, 0x70bd26, 0x0, {0xf}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x2c}}, 0x0) r3 = dup2(r1, r0) accept$alg(r3, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000240)={0x30, 0x5, 0x0, {0x0, 0x2, 0x9, 0x3}}, 0x30) r4 = socket$unix(0x1, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000280)=0x6) 22:31:43 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000600053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100005000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:44 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028040505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:44 executing program 1: syz_open_dev$media(0x0, 0x0, 0x400101) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) close(0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000140)) recvfrom(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4"], 0x1) fallocate(r4, 0x3, 0x0, 0x8020003) lseek(r4, 0x0, 0x3) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f00000000c0)=0xd35d, 0x2) close(r3) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r5, 0x0) write$P9_RWALK(r5, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r6 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r5, r6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:31:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000700053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:44 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x1a0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:44 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:44 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e480000280a0505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100006000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a240900053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:44 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr="fd2440a174c4e12ad1acaee20b9489fa", 0x2000000, 0x1, 0x0, 0x2, 0x7}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 22:31:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000a00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:44 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e480000280e0505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:44 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:45 executing program 0: set_mempolicy(0x8000, &(0x7f00000000c0)=0xfe, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0xffffffff, &(0x7f0000000080)=0x4) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000200)) 22:31:45 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e480000280f0505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:45 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:45 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000e00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60108d08000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:45 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cifs\x00', 0x2, &(0x7f0000000200)='l\x00') [ 523.220708][T15061] validate_nla: 13 callbacks suppressed [ 523.220793][T15061] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 523.257728][T15062] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:45 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14) set_mempolicy(0x2, &(0x7f00000000c0)=0x2, 0x8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) r2 = socket$l2tp6(0xa, 0x2, 0x73) writev(r2, &(0x7f0000001b80)=[{&(0x7f0000001740)="683ee6dc144cb026357bc040f0481ead90c5177981ad10904e67017e7a758e80bb319d1a06b23f7876319d34ceeb209c7b86576eac4150e8e2815efbaa47303fe97675827240cbdd524444f9e85dc62bbcdcfb80e9b37ccfd7544cd120bf99dfcdda86223ee63990edfd68989597c39482f27415d6e1987047830dc8970ca58b2bf994fd389a4713c7e48a87d87762e04def7276dfed5546155264971d634af195c1fd2ac6b1dd", 0xa7}, {&(0x7f0000001800)="0799cd311ec25f3695b4a772c57f45642f0cfba69c9029e1f297acfd149499cb21a391e67ac41d99c01f6cc14b6433158d0c387f81ed9ae9a1c4368dc3b7c298970667d8600dc622242f752930f363a4a57936dab70ca9f9996598a147c00f2631b84a1294a14ac58b3b15bf067d4021b6b261816f8f63376c023e3401f84adf565cd471bf873385698b1519d39e66a8600402200956ff9a5f76bb399be251d988a9190fa863f02e06faf23717bcf69ad54d14f34908eb860a39", 0xba}, {&(0x7f00000018c0)="7495783a2b68dab44b03d2e8d4f487d7e2ab424096f9525149c2abef985678555d517154ba767917391426217759d25d60234ba722f51fbd0a95baad1adca23b3f77ee067b1703f9f10ff3be4dfca8ac537155fb6b44c9925fb6fdc1696879eb448de511ec737904de369189e2b79e58da1cab6f445680b7e7d1ef1129897e3e56a51bdc4bca975436cda29a88cc6e6ab240496bf5d950f05a9e04a9b0c15e87b4573c9a82ecd75003bb3bc55ed11406934fc59d795f9ac187320475891faae9414aa6a4279fed6b715e0ef09fae7bb03b63658a48d253f6", 0xd8}, {&(0x7f00000019c0)="4c99d52a0672ef288b3cdba0ca02cbb755a750f326c14cb03f5b9a90b610a1d60a1a47a35e4d37b6dbc59633a0dace03ff8ce7823a27db97f7b5a0f65b707ca1ecef8634ff4d1349760f821aefcccf19199cd9a76037deb06dfe01a7b901b08aa894b725b0b0a567458f80bc4b79e6903a96ce59711394c4bf273bb1e2c7cb9616fc3335389a51daed9103085d14512a13984a01e933c79aaea8f8190430d7cb8fc27dfeb21fbfa63248bbb96105d64366f117dec553a809b3faaf1489e9f7cbcd6039a901166c48", 0xc8}, {&(0x7f0000001ac0)="f8124f9134b8502287ddcd198648952888687ae5aed2725be6a8a05f70682f60da5fde20f223", 0x26}, {&(0x7f0000001b00)="0f1c57d7b3dca621da055affd3262c713272d4fb6cf2213260bdbbc5f8c1c2061d691695a2c11793ac74fc641dee4898b335e87e688a6e2f3200d62d1120d94d219e6eee683d4705c204113a053dc0e97b840632f3cb26607e8ef5e52c010959d265f6744d792f8b70ee", 0x6a}], 0x6) 22:31:45 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a092400053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:45 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028600505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:45 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60108e08000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 523.502832][T15075] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:46 executing program 0: mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x2, 0x3, 0x0, 0x0, 0xa366, 0x3040, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x2, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) getpgid(0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0xc0200, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080025944eeba71a4976e252922c000000002aba000000012e0b3836005404b0e0301a4ce875f2e0ff5f163ee340b7679500800000000000000101013c5891039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="286284582bc5fb661b1cc80000001000250800"/30, @ANYRES32=r4, @ANYBLOB="000000000000000008000a000f000000"], 0x28}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0) write$P9_RWALK(r5, &(0x7f0000000300)=ANY=[], 0x6) r6 = socket(0x10, 0x80002, 0x0) close(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="08002b000000000005002f0000040000"], 0x2c}}, 0x0) bind$l2tp(r6, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r9) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') sendfile(r11, r12, 0x0, 0x1000007ffff000) 22:31:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a012d00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:46 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028003505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010000a000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:46 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 523.756447][T15085] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 523.823403][T15089] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 523.856471][T15089] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 22:31:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a004800053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 523.932543][T15094] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:46 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028003505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010000e000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 524.027137][T15097] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:46 executing program 1: semget(0x1, 0x0, 0x0) semop(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) r1 = getpid() tkill(r1, 0x1000000000015) r2 = getpgrp(r1) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x2, @tid=r2}, &(0x7f0000000040)) timer_create(0x3, &(0x7f0000000380)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000500)="342e4d3eda9dc4aecee6471f57d970653611bacd3342f1467a2f15cb2fc22bafa3d10f54e7e47644e1b66e247aa7a367af666ce5d1c72fa1c45afec0cb593af42ccc9d24b2d5c20618aaaae507e63bcf29c94ecf38c9df676f77f182a0c6c82b8538ca948f73bb7fbe787632858f1a1a50f54de5795d45e88a1d806222e1d0c3dcd1bdff766dd1942b20f337fb856babff5db6ba92043e3c00f669f12a80cfbebf0d912d1b7d6fc794f921", &(0x7f0000000600)="38f59f5528b8586cb3e919c21d25f8bfec5e9ef6dad6c0b9cd78adaff7b3b1dac08d5f746d75ec2dd1971f276bc4b22a3c55826e4305e23f557813bfcb9e0a6aefadb4"}}, 0x0) r3 = dup3(r0, r0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000480)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x80, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:cgroup_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x792b1d17588cbf5b}, 0x4004) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="01dc41715b224044068901010000d0c634ec9d", @ANYRES16=r4, @ANYBLOB="100025bd7000fbdbdf250300000014000600626f6e645f736c6176655f300000000008000400ac1414aa"], 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000010) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) close(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000240)=0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x25dfdbfc, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x2c}}, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) r9 = socket$unix(0x1, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) timerfd_gettime(r10, &(0x7f0000000400)) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000280)={0xfffffff9, 0x6, 0x1, 0x6, 0x5, "08bb4dd69da78909fa65e8baab1be0e494d305"}) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f0000000080)={0x280000000000000, 0x4, 0x0, 0x2, 0xa}) r11 = socket(0x10, 0x80002, 0x0) close(r11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r13, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r14 = socket(0x10, 0x80002, 0x0) close(r14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r16, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100d6901800000000000000000000000000000000f6d9bb397e60858a000695fbf22b6b823ef80000008042f33384b7def9cf12741eb3b9f77a45a8a9a3ca2873fe43a5000000000000000000000000000d86e5804a69008d22865884ec1c2228c0de52a6727ce14cbbd5b824d6c721513565d0a6449e82235116b5d11661258261fcda0a41fa443b2a59b76218e973c65ba3e57ba2d2ff05bfb4f6502b677a7bfef4af41f48fe7697490e2087fe7192bf2c518", @ANYRESOCT=r16, @ANYRESHEX, @ANYRESOCT=r0], &(0x7f0000000480)=""/264, 0xf6, 0x108, 0x8}, 0x20) 22:31:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a004c00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 524.147573][T15102] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 524.170292][T15102] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 524.194496][T15107] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:46 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000535d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:46 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f00000000c0)={0x0, 0x8}) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[{@jqfmt_vfsold='jqfmt=vfsold'}]}) socket$vsock_stream(0x28, 0x1, 0x0) getpid() 22:31:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010000f000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:46 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a006000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:46 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c6394350224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:46 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a006800053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:46 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100020000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 524.541374][T15120] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "" [ 524.633285][T15128] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "" 22:31:47 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a006c00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:47 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d3524fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:49 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:49 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010000f000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100048000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:49 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0235fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a007400053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:49 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:49 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d02c0fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:49 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010004c000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a007a00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:49 executing program 0: syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) fcntl$setflags(r1, 0x2, 0x1) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$reject(0x13, 0x0, 0x200, 0x100, r4) r5 = getpid() tkill(r5, 0x1000000000015) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x8, 0x1f, {r5}, {}, 0x10001, 0x1}) getpgid(r6) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000c40)={{}, {}, [{}, {}], {0x4, 0x2}, [{}, {}, {}, {}, {0x8, 0x1}]}, 0x5c, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='bpf\x00', 0x40, 0x0) setresuid(0x0, 0x0, 0x0) r7 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r7, &(0x7f0000000240)=""/112, 0x349b7f55) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000200)={r7, 0x81, 0xc2}, &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'xcbc(des3_ede-asm)\x00'}}, &(0x7f0000000400)="fca1e6e014d6c31b81146ed203a652525857454e50483936051da1881bff662786d70a5a67955442dbb4c0aadd71cd4d302e49da3955ce29f0a3aaeefff261603114e173c383bd586f039f7cd9d119a5766630cb9726c46d6eb895fb27eab1278e3207c17926ce4303acb5c9303f68041907f6457ab95633502208abb21bd12754", &(0x7f0000000600)=""/194) setregid(0x0, 0x0) 22:31:50 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60020007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100060000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 527.794906][T15183] __nla_validate_parse: 1 callbacks suppressed [ 527.794920][T15183] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000353582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:50 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100068000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:50 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60030007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 527.985153][T15191] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010006c000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000200053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:50 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60040007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:50 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000300053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 528.229656][T15201] validate_nla: 23 callbacks suppressed [ 528.229704][T15201] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 528.264081][T15203] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:31:50 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100074000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 528.404517][T15208] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 528.461799][T15209] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:53 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:53 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60060007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:53 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000400053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010007a000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 530.734322][T15217] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 530.787165][T15220] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 530.809199][T15222] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000500053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 530.829186][T15220] netlink: 4874 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010088d000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:53 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60080007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 531.020647][T15228] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 531.123243][T15232] netlink: 16394 bytes leftover after parsing attributes in process `syz-executor.4'. [ 531.158655][T15233] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:31:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000600053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 531.177065][T15233] netlink: 4874 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:53 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010088e000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 531.277198][T15236] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:53 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc600a0007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:53 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:53 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000700053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 531.521303][T15244] netlink: 13014 bytes leftover after parsing attributes in process `syz-executor.2'. [ 531.539848][T15243] netlink: 16394 bytes leftover after parsing attributes in process `syz-executor.4'. 22:31:54 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc600c0007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000d2000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000a00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:54 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 531.870293][T15254] netlink: 13014 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000e00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000025000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:54 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60350007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f000003e000)='\'', 0x0) r4 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x80045301, &(0x7f00000001c0)) r6 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) r8 = socket(0x10, 0x80002, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2ce97fcd6bf5127c1f0f0000000000000020b85640fbb30b", @ANYRES16=r10, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES16=r8, @ANYBLOB="1165604b7bc21cbeab961ac55f386770cc534412b0d2a6a4155dddf5c631e48468086ce831ed5364939f6adf4466f75f59f8411ae719cd9bfd74ac019dae1e86ebfa745effea4f0dbf864f0c22ee067aba00b092a73960ae46b1aeb768d699188e4a26082d36bde81ef1b8a31a96d5ff9c805e33e00c9f08ada1842957fe47134d669539771302ffa6f5812e97685c9bcd4ae6aebfdf652d072a5badaad098dcedc8238f3d8b80af815f6935df9ecbabbf5dc9356ce9c057e881fe708ad4e019f41d9a35b80ba7886c4db3766a0e9e57a55aea0c53df4c50d5badb4036a55b26ddefccb321c563869c8b9c400a8ea48378b3b8", @ANYRESOCT]], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r7, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000040)={r7, 0x1, 0x93, "894cc7da9e9437d5f8cdf97a1eaf357cfebf310f19047d2a5d3ff3460cb3c49af521f6bdc631d6b802f01af461e1479c04545adb0597ed5401b1638ee908eac0900d039a673e3917258e429e8a469bc72a15b28ca9d8400e4d6a6fe326d94c1868ac0ee3744a3f96300c1243fba7b10c6cd5e99d0b03f4aa3d2d60dc3f38d049e9d7a49f91463d8c2419fb860229c88115f120"}, 0x9b) r11 = getpid() tkill(r11, 0x18) r12 = socket(0x10, 0x80002, 0x0) close(r12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r14 = socket(0x10, 0x80002, 0x0) close(r14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r16 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r14, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r16, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r15}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r16, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000240)=0xc) r17 = getpgrp(r11) r18 = getpgid(r17) write$FUSE_LK(r2, &(0x7f0000000000)={0x28, 0x0, 0x1, {{0x6, 0x8, 0x0, r18}}}, 0x28) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)=@ipv6_newrule={0x1c, 0x20, 0x1301, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) 22:31:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a004800053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 532.222599][T15269] netlink: 18402 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000035000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:54 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0xae1d1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000140)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000180)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r4, &(0x7f00000017c0), 0x259, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) ptrace$setopts(0x11, 0x0, 0x0, 0x200000000000030) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = socket(0x10, 0x80002, 0x0) close(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000200000000045473837d362717ef8560d300000008000300", @ANYRES32=r7, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) flistxattr(r6, &(0x7f0000000180)=""/218, 0xda) r9 = getpid() sched_setattr(r9, 0x0, 0x0) fcntl$setstatus(r5, 0x4, 0x42800) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r10, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xf2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 22:31:54 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:54 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601a4807000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:54 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a004c00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:54 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000293c000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:55 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60586507000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a006000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000005a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 532.892564][T15294] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:55 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:55 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60008107000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a006800053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:55 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000185000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 533.243616][T15305] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.2'. [ 533.337140][T15309] validate_nla: 15 callbacks suppressed [ 533.337224][T15309] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:55 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:55 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100207000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:55 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 533.440252][T15312] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a006c00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100003f6f0000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 533.603219][T15320] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 533.644749][T15320] netlink: 17930 bytes leftover after parsing attributes in process `syz-executor.2'. [ 533.710123][T15323] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:56 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100307000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a007400053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 533.786432][T15328] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:56 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100002000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 533.890828][T15331] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 533.921098][T15331] netlink: 17674 bytes leftover after parsing attributes in process `syz-executor.2'. [ 533.956061][T15333] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:56 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x2}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) sendto$inet(r0, 0x0, 0xfffffffffffffe10, 0x60004810, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='maps\x00') preadv(r3, &(0x7f00000017c0), 0x199, 0x0) 22:31:56 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100407000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a007a00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 534.112494][T15339] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:31:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100003000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:56 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 534.233880][T15349] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 534.255557][T15349] netlink: 17418 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:56 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100a07000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 534.322004][T15351] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:31:56 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) dup(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x32203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={r3}) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) 22:31:56 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100004000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:56 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a002d01053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 534.559443][T15362] netlink: 15882 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:57 executing program 0: ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) r0 = getpgrp(0x0) setpriority(0x0, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x320002, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = creat(0x0, 0x0) flistxattr(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) r4 = memfd_create(&(0x7f0000000280)='^\x00', 0x0) r5 = socket$packet(0x11, 0x0, 0x300) keyctl$read(0xb, 0x0, &(0x7f0000000180)=""/86, 0x56) getsockname$packet(r5, 0x0, &(0x7f0000000140)) flistxattr(0xffffffffffffffff, 0x0, 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) r6 = socket$unix(0x1, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TCXONC(r7, 0x540a, 0x2) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000000c0)={0x2, [0x0, 0x0]}) sendfile(r1, r4, 0x0, 0x102002700) [ 534.690264][ T27] audit: type=1804 audit(1580769117.065:60): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir095312513/syzkaller.vhfqzv/50/file0/file0" dev="loop1" ino=35 res=1 22:31:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000003053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:57 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 534.737519][ T27] audit: type=1800 audit(1580769117.085:61): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=35 res=0 22:31:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100e07000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100005000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000005053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000006053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:57 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r0, &(0x7f0000000900)={0x2c, 0x0, r2}, 0x10) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r7, 0xc08c5334, &(0x7f0000000400)={0x1, 0xfffffff8, 0x0, 'queue0\x00', 0x80}) r8 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCRTMSG(r8, 0x890d, &(0x7f0000000300)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @multicast2}, 0x287, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='batadv_slave_0\x00', 0x1, 0x2, 0x6}) r9 = socket(0x10, 0x80002, 0x0) close(r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000500)={0x0, @reserved}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x2c}}, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r12, 0xc004ae02, &(0x7f0000000200)={0x4, [0x0, 0x0, 0x0, 0x0]}) close(r9) [ 535.141700][T15392] netlink: 14858 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:57 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) dup(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x32203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={r3}) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) 22:31:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100f07000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:57 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:57 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100006000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:57 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000007053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 535.401353][T15403] netlink: 14602 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:57 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60106007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:58 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000046278ab0ce112d91549800007110440000000000c6000000020000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000100)={[0x7f]}, &(0x7f0000000140), &(0x7f00000001c0)={0x0, 0x989680}, 0x8) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x0, 0x101, 0x2}) [ 535.641377][T15423] netlink: 18458 bytes leftover after parsing attributes in process `syz-executor.2'. 22:31:58 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100009000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a002409053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:58 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80040, 0x0) ioctl$TIOCOUTQ(r0, 0x4b72, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000000)) 22:31:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:58 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:58 executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) dup(0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x32203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000040)={r3}) write$9p(r1, &(0x7f0000001400)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) 22:31:58 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100035000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:58 executing program 0: r0 = getpgrp(0x0) setpriority(0x0, r0, 0xffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) geteuid() accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) shmget(0x1, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) ptrace$getenv(0x4201, r1, 0xba, 0x0) r2 = socket(0xa, 0x3, 0x6) connect$bt_rfcomm(r2, &(0x7f0000000000)={0x1f, @any, 0x8}, 0xa) bind$inet6(r2, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_score_adj\x00') write$P9_RWALK(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000780)={{{@in6=@mcast1, @in=@dev}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0x56d) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f00000000c0)='./file0\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r9, &(0x7f0000000180)='./file0\x00', r8, &(0x7f0000000640)='./file0\x00', 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = socket$unix(0x1, 0x1, 0x0) r13 = fcntl$dupfd(r12, 0x0, r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) r14 = socket$unix(0x1, 0x1, 0x0) r15 = fcntl$dupfd(r14, 0x0, r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) renameat2(r15, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000200)='./file0/file0\x00', 0x4) 22:31:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010000a000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:58 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a00000a053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:58 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100009000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:58 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:58 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100035000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:58 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010000e000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 536.401360][ T27] audit: type=1804 audit(1580769118.795:62): pid=15457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir095312513/syzkaller.vhfqzv/52/file0/file0" dev="loop1" ino=36 res=1 [ 536.475942][ T27] audit: type=1800 audit(1580769118.825:63): pid=15457 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=36 res=0 22:31:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a00000e053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:59 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2, 0x20500) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f0000000240)={0x4, 0x0, 0x2, {0x7, 0x2, 0x0, 0xff}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = dup2(r3, r1) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x351900, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4001f5) r6 = openat$cgroup_ro(r4, &(0x7f0000000140)='memory.events\x00', 0x0, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r6) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000180)={'rose0\x00', 0x201}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r10 = dup3(r9, r8, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) 22:31:59 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007020a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010000f000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000924053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 536.952403][T15477] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready 22:31:59 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:31:59 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007030a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100048000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket(0x10, 0x80002, 0x0) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000010) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff19, 0x0, 0x0, 0x101aa) 22:31:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a00012d053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:59 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) modify_ldt$write(0x1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0xfffffffffffffe1e, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000b00010067726574617000001400020008000100", @ANYRES32=r5, @ANYBLOB="0800ffffffffffff08000a00", @ANYRES32=r5, @ANYBLOB="6ec8192b707bddfe6d3c2bfb6a8cfe701bc64c4debadf7805e0fa24564b3a23cce9a2e17d7ee4b8357b93171f5b5656f2b03d99a4ce3c68d3832de5601bb8a2d2ef0c818becdb89aacfcc252f6f2b925b4e5c336799cf97694662d98752b54a03bceca24756fffd35ba0d035a835bf21a764f02f8e805d2a499223915d9d3663f001d92512c5769c51777d9c9d0b4b116f0b8f74febafd4e19781c21e142f2e23d225b2dbde2d191c6fba843eb0765ba6d24237317cbabdd2a10aa71559aae09e775a0f7c25893f35a7e43ff673cf8e1733b0ac5f6b52bed00862f76c1d285"], 0x4c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) 22:31:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010004c000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:59 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000048053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:59 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007040a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100060000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:31:59 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100068000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 537.493563][T15505] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 537.532420][T15510] bond1 (unregistering): (slave gretap1): Releasing backup interface 22:32:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket(0x10, 0x80002, 0x0) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20\x00', 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1040000}, 0xc, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1ac}, 0x1, 0x0, 0x0, 0x24000800}, 0x4000010) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff19, 0x0, 0x0, 0x101aa) [ 537.811345][T15510] bond1 (unregistering): Released all slaves 22:32:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a00004c053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:00 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000070a0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010006c000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:00 executing program 0: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x48, 0x3, 0x8, 0xb, 0x1}) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000140)={0x1000023, 0xfffffffe, 0x10000009, 0x6, 0x20000003, 0x81}) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) 22:32:00 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)={0x0, 0x2, 0x4, 0x70904, 0x100, {}, {0x3, 0x2, 0x81, 0x80, 0xe0, 0x1e, "aba6e3ff"}, 0xc558, 0x4, @planes=&(0x7f0000000000)={0x2, 0x34, @fd, 0xab}, 0x9, 0x0, 0xffffffffffffffff}) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f00000000c0)) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c008105e00f80ecdb4cb9f207c804a01c000000a30306000a000200080ada1b40d805000500c50083b8", 0xa4}], 0x1}, 0x0) 22:32:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100074000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:00 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000070e0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000060053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, 0x0, 0x800000000000000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000000)) r2 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x6) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50, 0x0, 0x0, r4}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x0, 0x10000}}, 0xe8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='C\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000fddbdf250c00000009000700944c80000000000004006e800500080000000000040004000b00050008000000000000000000000000000100"], 0x44}, 0x1, 0x0, 0x0, 0x40018}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) 22:32:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000068053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 538.316468][T15550] device veth1_to_bridge entered promiscuous mode 22:32:00 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010007a000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:00 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:00 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000070f0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 538.459946][T15558] usb usb7: usbfs: process 15558 (syz-executor.0) did not claim interface 0 before use 22:32:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000d2000a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 538.529556][T15561] validate_nla: 44 callbacks suppressed [ 538.529569][T15561] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 538.545052][T15563] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 538.548258][T15564] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:32:01 executing program 1: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80000000002) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000002840)={"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"}) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r6 = socket(0x10, 0x80002, 0x0) close(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r8, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) close(r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r11, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r12 = socket(0x10, 0x80002, 0x0) close(r12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r14, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r15 = socket(0x10, 0x80002, 0x0) close(r15) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r15, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r17 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r17, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r16}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r18 = accept$nfc_llcp(r15, &(0x7f0000000040), &(0x7f00000000c0)=0x60) r19 = fcntl$dupfd(r18, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200) r20 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3, 0x404102) ioctl$LOOP_SET_FD(r20, 0x4c00, r2) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) 22:32:01 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007600a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a00006c053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 538.728956][T15558] usb usb7: usbfs: process 15558 (syz-executor.0) did not claim interface 0 before use [ 538.766612][T15576] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:32:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_keyring_id(0x0, 0x0, 0x800000000000000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000000)) r2 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x40000000909, 0x1) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x6) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x0, 0x4e23, 0xfd3, 0xa, 0x80, 0x50, 0x0, 0x0, r4}, {0x5, 0x1, 0xf, 0x2, 0x9, 0x1, 0x3, 0x3}, {0x101, 0x8000, 0x8, 0x1}, 0x8, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3505, 0x2, 0x1, 0x1, 0x5a, 0x0, 0x10000}}, 0xe8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000810}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='C\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000fddbdf250c00000009000700944c80000000000004006e800500080000000000040004000b00050008000000000000000000000000000100"], 0x44}, 0x1, 0x0, 0x0, 0x40018}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) [ 538.785055][T15577] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 538.885557][T15583] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:32:01 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000070035000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000030a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000074053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x444, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000000)=' ', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) r2 = socket(0x10, 0x80002, 0x0) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x9d, 0x68, 0x0, 0x3597, 0x3, 0x3b, 0x6, 0x393, 0x40, 0x2df, 0x9, 0x9, 0x38, 0x2, 0x1, 0x18, 0x3}, [{0x70000000, 0x80000000, 0x760f, 0xc3, 0x7, 0x6, 0x100000000, 0x80}, {0x60000000, 0x2, 0x90ba, 0x8, 0x3, 0x7fff, 0x80, 0x40}], "2d2fff166321044aa0ef1cae4778a8daf240ba3823a051c9356fbce1375e9065aeae86d4a7caba87ac3c9725c8bf267779c95c84a115667d3b085c8053d6b2e9891b9b65285cff4cc94b27abc05a5f5d9de9a29420a5a8f457d9cb285fa3c09f53a7426bd8fc0f25c2b2f9b547f67ad212c5d1afdca051ebefddfe952d2ca88a9407edf15f0db815c67ccc9bef9c50d175cc6ea520b92eb6a1ff0ee857b018c1f3f6995d3d84f50f9cda90451c0cea3ac7f4eac08ac2ffd1b1a35a04e8fe9ca80ef0b9a8dcf9f4b3a07f50168452c76314c0bd8e1967", [[], [], [], [], [], [], [], [], [], []]}, 0xb86) ioctl$LOOP_CLR_FD(r0, 0x4c01) 22:32:01 executing program 5: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 539.074872][T15588] usb usb7: usbfs: process 15588 (syz-executor.0) did not claim interface 0 before use [ 539.117987][T15590] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 539.171875][T15597] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 539.231837][T15597] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 22:32:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000050a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:01 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x80002, 0x0) close(r3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r1, r0, r3], 0x3) msgget(0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32, @ANYBLOB="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"], 0x84}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x49249249249278c, 0x0) 22:32:01 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000070035000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 539.325882][T15605] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 539.353531][T15598] blk_update_request: I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 22:32:01 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a020000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:01 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a00007a053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:01 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000060a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:02 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20100, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r1 = getpid() tkill(r1, 0x11) perf_event_open(&(0x7f0000000a00)={0x0, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x20}, 0x4400, 0x0, 0x2, 0x2, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) memfd_create(&(0x7f00000000c0)='[mime_type}lo(\x00', 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rfkill\x00', 0x163080, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYRES32=r3, @ANYBLOB="0000000000a0ffffffffffffd6228d6fdd02bd780000", @ANYRES32=r4]) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f0000000340)={@local}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f0000000100)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xa}}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x4, 0x0, 0x1}) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x65) r6 = socket(0x10, 0x80002, 0x0) close(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r8, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000180), 0x4) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e24, @rand_addr=0x1f}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000380)={0x7f, {{0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}, 0xfffffff9}}}, 0xfcb8) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000280)={0x1}, 0x8) 22:32:02 executing program 5: r0 = socket$kcm(0xa, 0x0, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:02 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a030000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:02 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000200)) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x3) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) getegid() fcntl$setstatus(r3, 0x4, 0x2000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0xcc, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @rand_addr=0x6}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x9000}, 0x4000) umount2(&(0x7f0000000540)='./file0\x00', 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 22:32:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000002053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000070a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:02 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a040000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:02 executing program 0: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0)='NLBL_CIPSOv4\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300)) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340), 0xc, 0x0}, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr=0x7, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2], 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:32:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000003053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:02 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a0a0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:02 executing program 5: r0 = socket$kcm(0xa, 0x0, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000004053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:02 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010008d080a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000005053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:02 executing program 0: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="9172618bfc74e3e35fa2d0646e6f3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000100)={0x401, 0x6, 0x4, 0x20000000, 0x6cc8, {r2, r3/1000+30000}, {0x1, 0x0, 0x0, 0x7f, 0x7, 0x1f, "5cab0939"}, 0x4, 0x1, @userptr=0x5, 0x3ff, 0x0, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f000003e000)='\'', 0x0) r6 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x80045301, &(0x7f00000001c0)) r8 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) r10 = socket(0x10, 0x80002, 0x0) close(r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r12, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r13, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0xc8}]}, 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x2400c005) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYBLOB="6600000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc735b92de0e6392e2706ed317c2b6c5aaf257a2c2dedee8e1b57bb2c98141dcd6417c22d5159791888812083"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r9, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={r9, 0x74, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0xfffffffd, @loopback, 0x3}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x2e}, 0xfffffffb}, @in6={0xa, 0x4e23, 0x5, @loopback, 0x6}]}, &(0x7f0000000280)=0x10) 22:32:03 executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000200)) dup2(0xffffffffffffffff, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x3) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) getegid() fcntl$setstatus(r3, 0x4, 0x2000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) fchdir(r2) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)={0xcc, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff7fff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x38}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @rand_addr=0x6}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x29, 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x9000}, 0x4000) umount2(&(0x7f0000000540)='./file0\x00', 0x0) socket$inet6(0xa, 0x400000000001, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d0) 22:32:03 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a0e0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010008e080a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000006053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:03 executing program 5: r0 = socket$kcm(0xa, 0x0, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:03 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a0f0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000007053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000a0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:03 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a00000a053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:03 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a600000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000e0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:03 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x400002b7, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x50, &(0x7f00000000c0), 0x1}, 0x0) 22:32:04 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000ad70200053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a00000e053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:04 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000f0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200"], 0x34}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) close(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000050e48420eb00", @ANYRES16=r7, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) close(r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='l?\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r11, @ANYBLOB="08002b00000000000500edae0000000013d233f91468090b0a5aa2ab47f7ec4c62566c4f073602b199943e6535310381c01045cd1134dcb7d5392c508917e6c31fb2cc3816354febf40b06aab05253d8b191dcd85a98e758c8d68f"], 0x2c}}, 0x0) lseek(r10, 0x6, 0x2) r13 = socket(0x10, 0x80002, 0x0) close(r13) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r15, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r16 = memfd_create(&(0x7f000003e000)='\'', 0x0) r17 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r18 = dup2(r17, r16) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r18, 0x80045301, &(0x7f00000001c0)) r19 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r19, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r18, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r20, @ANYBLOB="6600000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc735b92de0e6392e2706ed317c2b6c5aaf257a2c2dedee8e1b57bb2c98141dcd6417c22d5159791888812083"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r20, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r13, 0x84, 0x78, &(0x7f00000002c0)=r20, 0x4) r21 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r21, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f00000002c0)=ANY=[], 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001e0004002bbd7000fcdbdf25000000ce"], 0x14}, 0x1, 0x0, 0x0, 0xc052}, 0x0) r22 = socket$netlink(0x10, 0x3, 0x0) ioctl(r22, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") 22:32:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000048053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000200a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:04 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000300053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:04 executing program 0: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x17) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000000)={0x3, 0x4848}) getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x2000c00, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x4, r7}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 22:32:04 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r0 = getpid() tkill(r0, 0x1000000000015) r1 = syz_open_procfs(r0, &(0x7f0000000080)='syscall\x00') ioctl$RTC_AIE_ON(r1, 0x7001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000280)) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x60, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="580000000000000014010000090000000500000000040000", @ANYPTR=&(0x7f0000000a80)=ANY=[@ANYBLOB="0300000000000000"], @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="576f00f74e3f9c00000000000000370006000000000000000b000000000000002b001761000000000100000000000000b80f66ce0b254c49b3ef55718b4a48275ecf9d1ac57747040c3ac632120bc9d4e2854017b4b8422085959ecbec1717daf4befccc034f8e71c58dbdf31b5d0e1196cd52f0df5e9abb4f82c3d956d58c8d73d91e3a40ec143a358e5718c6ced44e8d049d737b8699e9ee232005f88dd6b60d28c12e6344a1f134f1f01908a32613bd2264ec3e96e16d9ca1279f823a55aacd8e841818357bb3c4f9d6cf5786915e0e0f872e521eb7f364c6c71965aa93d6d8bf065b41d73656314fc98bd51cef5279e900000000000000"], 0x58}, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x420000, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001640)={0x8, {"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", 0x1000}}, 0x1006) setxattr$trusted_overlay_upper(&(0x7f0000000680)='./bus\x00', &(0x7f0000000800)='trusted.overlay.upper\x00', &(0x7f0000000900)={0x0, 0xfb, 0xb3, 0x0, 0x2, "0a00b2bea29436913fe61e00", "1ff66dac447ff4347ff8dec672b5939fed6816a05f742bab2056ab061153d00b867cc238eb00372fb44593d0164b1de7216f77dde3d56eebc74acbddd060f9b35804bd9c9357481ee40c2b36fd0c6ad8d1c14ad0666e895e8bd978caa6e3f5465e5ebdbc5282511673bca395c721369233cb404bb716ea7e61dc4f03325e31d680c65ec1c725eb48db2b58f473723ba2f41defbb94b9e16e356a85c678b5"}, 0xd1, 0x7) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240), 0x7fff) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) 22:32:04 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000480a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a00004c053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:04 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000a00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 542.361488][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 22:32:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000004c0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000060053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 542.522377][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready 22:32:05 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000e00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000600a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 542.618976][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready 22:32:05 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000680a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 542.741598][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready 22:32:05 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000068053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 542.846409][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 542.947659][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 543.020741][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 543.173599][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 543.189431][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 543.206887][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready 22:32:05 executing program 0: write$char_usb(0xffffffffffffffff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) [ 543.227957][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 543.235486][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 543.246747][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 543.254791][T15763] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready 22:32:07 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x8, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RREAD(r2, &(0x7f0000000100)={0xb, 0x75, 0x2}, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_KEEPCAPS(0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) utimes(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x7530}, {r3, r4/1000+10000}}) r5 = socket(0x10, 0x80002, 0x0) close(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000180)=0x8000, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000300)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000640)="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", 0x10000, 0x80, 0x0, 0xfffffffffffffd64) 22:32:07 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000f00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000006c0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a00006c053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:07 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:07 executing program 0: stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) getegid() socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000500)=""/204, 0xcc) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4) syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)) clock_gettime(0x0, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) r0 = syz_open_dev$mice(0x0, 0x0, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) close(0xffffffffffffffff) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x6) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x41c1, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x3}, 0x0, 0x0, r3, 0x0) lsetxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='security.evm\x00', 0x0, 0x0, 0x6) unshare(0x60020000) [ 545.280275][T15815] validate_nla: 52 callbacks suppressed [ 545.280287][T15815] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 545.289105][T15817] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 545.295600][T15814] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 545.310918][T15817] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 545.345359][T15818] IPVS: ftp: loaded support on port[0] = 21 22:32:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000740a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:07 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a006000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:07 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000074053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 545.457710][T15822] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:32:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_DUMPABLE(0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @empty}}) write$tun(r2, &(0x7f0000000240)={@void, @val, @mpls={[], @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x21, 0x0, @dev, @remote}, @echo_reply={0x0, 0x0, 0x0, 0x0, 0x0, "e7e65509"}}}}, 0x2a) 22:32:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000007a0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:08 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 545.586041][T15828] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 545.609471][T15829] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 545.648362][T15828] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 545.729211][T15835] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 545.767785][ T8129] tipc: TX() has been purged, node left! [ 545.773990][T15837] dccp_invalid_packet: P.Data Offset(0) too small [ 545.933666][T15841] dccp_invalid_packet: P.Data Offset(0) too small 22:32:08 executing program 1: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000100000601000000000600000000000000000000f3000000000000000f030000007794b900000861fddd8033b53f084921de3166a3f264ac4856bf2837eb111a68662636b6c7313d457164b26b8daa72b4558a6af617c43461db515e08b413be0d6a660be3330d67ea45172326fe0b667a668b1e54179f776161"], &(0x7f0000000380)=""/249, 0x42, 0xf9, 0x8}, 0x20) r1 = dup3(0xffffffffffffffff, r0, 0x80000) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x24000101) 22:32:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000088d0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a00007a053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a02d700053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:08 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) close(r1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002ec0), 0x3dd8a00f70692a9, 0x1a, &(0x7f00000001c0)={0x77359400}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f000000b180)=[{0x0}, {&(0x7f000000af40)=""/98, 0x62}], 0x2}, 0x6}], 0x3, 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "b5c6785d8f2d0d81453e074ae4f9010b10a37d99fec5b78b52f92856f01f806b767c39c4b62d1c0c64383c6c3143965972601373405e791e8e5a9163d74fca95dbff653c8310d5db25af8620deaac37d970e9b4244d4c15c946e25026dd72a17bd586131836178f169588f341131ce023e3a2569da50a2de381fe9b3a84f8ce1a89812e76acebeb3dcaf02ec9665fc36733e9b5b9662afe01d6055ef7b8132683c4e1c3bc1d1d92d4fd1db921a45613f61d9ff75bfdb0877cac4a504b76e24fe488020e076fb1614066e2a602402c0783d524553421a39998ab92c83f9e5e99ac4e1460035c9bc9c0fa5fffe8236664fe0854ebabc796897eb3cd204fcae8a35"}}}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) truncate(&(0x7f0000000080)='./bus\x00', 0x0) dup(0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) [ 546.214510][T15850] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:32:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000353582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000088e0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000353582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 546.386531][T15864] BPF: Invalid name_offset:1536 [ 546.406899][T15864] BPF: Invalid name_offset:1536 22:32:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000d20a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:08 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000200053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:08 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x7) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0xffa8) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0xffffffe9}) 22:32:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) close(r1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x5}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r0, &(0x7f0000002ec0), 0x3dd8a00f70692a9, 0x1a, &(0x7f00000001c0)={0x77359400}) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000b2c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f000000b180)=[{0x0}, {&(0x7f000000af40)=""/98, 0x62}], 0x2}, 0x6}], 0x3, 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000001c0)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}}}, 0x40) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300), 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x4000000) truncate(&(0x7f0000000080)='./bus\x00', 0x0) dup(0xffffffffffffffff) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) 22:32:08 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000353582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 546.753361][T15880] sp0: Synchronizing with TNC 22:32:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000020a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 546.803425][T15880] sp0: Found TNC 22:32:09 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000300053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050282c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 546.915417][T15880] sp0: Synchronizing with TNC 22:32:09 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x40000008}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000000)='syz0\x00') bind$isdn(r3, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x0, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) socketpair(0x2b, 0x5, 0x1, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000240)={0x3, 0x7ff, 0x100}, 0xc) bind$bt_rfcomm(r3, &(0x7f0000000340)={0x1f, @any, 0x1}, 0xa) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000000c0)={0x0, 'macsec0\x00', {0x3}, 0xfe03}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0x41}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:32:09 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000400053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000030a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:09 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000f4000085000000200000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0x4e, 0x0, &(0x7f0000000100)="bd9279a2723e77c6554827a58802ce7798c81db379159ee58e81a62010703df7caff6e2bfbb3ee20d0dd94f6e72cccac99308e997336bfa1e18b4754b8290f43a0e4707269063b7a7679c7d0db56", 0x0, 0x0, 0x0, 0x80, 0x0, &(0x7f0000000340)="ae7e980a931bf9777781b6c74fbd582803a9cda73fe406b9d64f40851de4829efa15db1fcf1a7209a04010a31c7f04f43dba931b828cca9ddd694128e2add7036c266afa3eceb54e3e5ebef1956ec1d497be0e984e8b9f2d6b30816757917d95c643fe2f6f2d892a335ac6c0372537554e9aa15f6b59f83471380fb57439c80bbcaebd4b79b797179cd7e448553a2c323400fc7d2ebf383b2c56017a08a1f25bdbc8bc1e7c441ebbcbe7830ea29dc12b99", 0x0}, 0x40) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f0000000000)=0x1) 22:32:09 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050382c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:10 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000040a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000a00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:10 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000080)={{0x0, 0x0, @descriptor="b6e599d98c212253"}}) recvmsg$can_raw(r2, &(0x7f0000000800)={&(0x7f0000000280)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)=""/235, 0xeb}, {&(0x7f0000000400)=""/227, 0xe3}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000600)=""/183, 0xb7}, {&(0x7f00000006c0)=""/2, 0x2}, {&(0x7f0000000700)=""/48, 0x30}], 0x6, &(0x7f00000007c0)=""/26, 0x1a}, 0x100) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000880)={0x9, 0x20}, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', r3}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028008000100020000004064576b54c9e6dcd21ede62e76ce78591c10db60b2147e8a2bef0ba036e340f15d9374c7c589e951c12c50c8b2a1424db587bb8f553e58e3125fdc7e83b10f6407c87a642b51763618cf64704cfc235b8bb617763aea09be44cbb6396a96d3ceabbaf4bb3693555067a66364944464c04673f58dfcb6ed90d9f21c4b6cc3e4dd748c0ffe5"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x0) 22:32:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050482c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x40000008}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000000)='syz0\x00') bind$isdn(r3, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x0, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) socketpair(0x2b, 0x5, 0x1, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000240)={0x3, 0x7ff, 0x100}, 0xc) bind$bt_rfcomm(r3, &(0x7f0000000340)={0x1f, @any, 0x1}, 0xa) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000000c0)={0x0, 'macsec0\x00', {0x3}, 0xfe03}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0x41}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:32:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000050a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:10 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000e00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0x2, "ee84bc4a965473a7"}, 0xa, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r8 = socket(0x1f, 0x3, 0x19) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0xe0, 0x9, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr="7bd3aea0720d38f7c70894e74b7a649b"}}}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfffffeff}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x80}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8844}, 0x48c0) 22:32:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000060a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:11 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000f00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050682c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:11 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 548.821865][T15974] kvm: emulating exchange as write 22:32:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000070a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x40000008}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000000)='syz0\x00') bind$isdn(r3, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x0, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) socketpair(0x2b, 0x5, 0x1, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000240)={0x3, 0x7ff, 0x100}, 0xc) bind$bt_rfcomm(r3, &(0x7f0000000340)={0x1f, @any, 0x1}, 0xa) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000000c0)={0x0, 'macsec0\x00', {0x3}, 0xfe03}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0x41}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:32:11 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a006000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:11 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050782c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000a0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:11 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a00d702053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:11 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:12 executing program 0: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x6c}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ea1000/0x4000)=nil, 0x4000}, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r3, 0x19}, 0x10) 22:32:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050882c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x40000008}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000000)='syz0\x00') bind$isdn(r3, &(0x7f00000003c0)={0x22, 0xfffffffffffffff9, 0x1, 0x0, 0x8}, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00'}) socketpair(0x2b, 0x5, 0x1, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000240)={0x3, 0x7ff, 0x100}, 0xc) bind$bt_rfcomm(r3, &(0x7f0000000340)={0x1f, @any, 0x1}, 0xa) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000000c0)={0x0, 'macsec0\x00', {0x3}, 0xfe03}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0x41}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:32:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000e0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000003053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050982c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000f0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:12 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:12 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a00000a053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:12 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050a82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:12 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 550.497822][T16042] validate_nla: 40 callbacks suppressed [ 550.497835][T16042] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 550.526613][T16044] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 550.568103][T16044] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 550.606250][T16047] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:32:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a00000e053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:13 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x5ba09f51) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f00000001c0)={r3, &(0x7f00000000c0)=""/208}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x3800) read$FUSE(r0, &(0x7f0000000380), 0x1000) 22:32:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000480a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050b82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 550.953628][T16055] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:32:13 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 550.997495][T16055] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 551.033059][T16058] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 551.061316][T16059] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:32:13 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000004c0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:13 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050c82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:13 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a00000f053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 551.482356][T16075] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 551.488009][T16074] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:32:13 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:14 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000060053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050d82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000600a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:14 executing program 1: r0 = gettid() r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffd]}, 0x8) ptrace$setopts(0x4206, r0, 0x7fff, 0x40) read(r1, &(0x7f0000e6d000)=""/384, 0xda) tkill(r0, 0x41) 22:32:14 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a0002d7053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010400000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) fsync(r1) r4 = socket(0x10, 0x80002, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) sendmsg$NFT_MSG_GETSET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)={0xa8, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_DESC={0x44, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x671}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf58}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x129d}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x400020}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x34}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xd3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0xa8}}, 0x20008091) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xd0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000002400070510000000000000000000000085b879344763ffd18d9fa0d002dd2aff8a5e05835501dd1fa4e69c2cf2a68d03db54907c19fa7c19f01d21fc4c6b672b5b52749483ffc528fd4f7b0b2664116531a683", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00001a0008000100706965000c0002000800050000000000"], 0x38}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r10, 0x84, 0x3, &(0x7f0000000480)=0x80000001, 0x4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r11, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) getsockopt$bt_BT_RCVMTU(r8, 0x112, 0xd, &(0x7f0000000340)=0x4, &(0x7f0000000400)=0x2) r12 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r12, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x41f809b1a7d7b00, 0x0) 22:32:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000680a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050e82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:14 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:14 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L+', 0x100000001}, 0x16, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr="0941b16af5c886552ddeecf93c809db2"}, 0x1c) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x5}, 0x8) 22:32:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000006c0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:14 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000002053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:14 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000050f82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:14 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000740a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42800) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, &(0x7f0000000300)) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc41}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000000806080026bd7000fddbdf250100000905000100070000000900020073797a32f20041a8e6a7020073797a32000000ffffff7f0073797a31000000000500010007000000531157d5c2031221016614ef6820ec09ed539783cbd9a8ec800b1aff41e3f0378c6aa8fa5c21dc229f84aa8cbe318a29c48da7247363daf37f809af12735b854ed126687d0dd51e9ea171099aea182548af0b3fbf58055968b25d5fb9c0e46dde07845a65cd01c5d43bfc55b443178ed2f84bf33c25283dc5fc31062818fa34691eb77870199"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x41d, 0x48, 0x0, {0x0, 0x0, 0x3f00, 0x0, 0x0, 0x2400}, [@IFLA_OPERSTATE={0x8, 0xa, 0x10}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0xf0}, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@initdev, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000000)=0xe8) 22:32:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000003053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051082c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:15 executing program 0: recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x10001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x10000, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x80f, 0x0, 0x0, 0x0, 0x0, 0xed, 0x3, 0x0, 0xebf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xe6b8, 0x0, 0x8, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x9, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socketpair(0x28, 0x800000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x180000) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x3, 0x1000, "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", 0x8, 0x1, 0x60, 0x8, 0x0, 0x96, 0x4, 0x1}, r5}}, 0x120) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, 0x0}, 0x0) getsockname$ax25(r4, &(0x7f0000000640)={{0x3, @netrom}, [@netrom, @netrom, @null, @netrom, @rose, @rose, @default, @default]}, &(0x7f00000004c0)=0xffffffffffffff27) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000540)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_type(r1, &(0x7f0000000580)='cgroup.type\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x12001) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000500)='veth0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000080)='+mime_typenodev\x00') r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) close(r7) 22:32:15 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000007a0a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000004053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000d20a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:15 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051182c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:15 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 553.171819][T16153] team0: Device ipvlan1 failed to register rx_handler 22:32:15 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a00000a053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r5 = socket(0x10, 0x80002, 0x0) close(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r7, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r11 = memfd_create(&(0x7f000003e000)='\'', 0x0) r12 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r13 = dup2(r12, r11) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r13, 0x80045301, &(0x7f00000001c0)) r14 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r13, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r15, @ANYBLOB="6600000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc735b92de0e6392e2706ed317c2b6c5aaf257a2c2dedee8e1b57bb2c98141dcd6417c22d5159791888812083"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r15, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000400)={r15, 0xc8, "3475b00046c73177cd38b13e2ad981bb8e6ea61d4ea6a4776d241d50c1e202e6126cf9137b28252bf2d5105addd60d93ec9a461262786acec994dcc6cca023160f2b39fc2170f44a2ed3106e07a5cef738106b27e21951093611cf312deee9d46e324ca5f0da69d7a6015d0311c62f830cee0271f77493e266aecbef4d4f1a668f2cad7858056bc15cd0169ae0462b2cfc27a461a5b57a444f2173894e6a9883e8e2325affde9b552f5bf42b2ae08657e5d0923195a3c5d1e9ab14611eac08e348701a9860829b35"}, &(0x7f00000002c0)=0xd0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000500)={r16, @in6={{0xa, 0x4e23, 0x7, @mcast2, 0x8}}, 0x800, 0x9, 0x4, 0x3, 0x40, 0x8, 0x6}, 0x9c) bind$ax25(r2, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) r17 = socket(0x10, 0x80002, 0x0) close(r17) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r17, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r19 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r17, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r19, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r18}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r17, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008104000000080000000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000100000000ed"], 0x3c}}, 0x0) [ 553.803866][T16177] team0: Device ipvlan1 failed to register rx_handler 22:32:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000025000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051282c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:16 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a00000e053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:16 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000240)={0x0, 0x11e, 0x0, 0x0, 0x0, 0xfffffd17}, 0x0) dup2(r1, r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa95a, 0x200) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x1, 0x187}) 22:32:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x42eef, &(0x7f0000000400)={&(0x7f00000007c0)=ANY=[@ANYBLOB="68000000100005074a03ffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="601fd3f16851e0279a5e1b53122dc4f518c243ea25d1747ccc8a4354d0e9851b1b0e522d7c812efa5dfa3305b8fe923173001ccba60cfed045f98809642dc84a8f5cdddde19795cea91a08d9fd5c6f4c3f793776420a27fa5d675a972ee5dc4248ae6c82c84a73769c8ff333d82f58ba58d55db815e9f024d0e8ee7c51a5792f81e4aa39d347be9c0589c37d25f00de69004e4c4ab37cf4c889eb2bc71500ff58d4f4ca3aa0d1e40964a2507d2d99fb8ff3fd9a2c0e6"], 0x68}}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000002000/0x2000)=nil, 0x3) r2 = socket(0x10, 0x80002, 0x0) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket(0x10, 0x80002, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}, {0x2, 0x4e23, @loopback}, 0x50, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)='lo\x00', 0x2, 0xfffffffffffffc00, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="08002b000000000005002f0000000000"], 0x5}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[]}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) recvfrom(r2, &(0x7f0000000080)=""/127, 0x7f, 0x0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x3, 0x1, 0x0, {0xa, 0x4e23, 0x7fffffff, @empty}}}, 0x80) 22:32:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000035000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051382c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:16 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:16 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a00000f053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_mount_image$hfsplus(0x0, 0x0, 0xffffffffffffffc1, 0x1, &(0x7f00000015c0)=[{&(0x7f00000005c0)="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", 0x9c9}], 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000200)="26f4b81b018ee86766c7442400891a00006766c74424020e5000006766c744240600000000670f011424f53e36670fc7e84848b80b0000000f23c80f21f866350800e0003e0f35e30ec720660f3834930000baa100ec0f01c5", 0x59}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000015c0), 0x10000005c) 22:32:16 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000293c000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051482c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:16 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000060053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:17 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000353582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000005a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:17 executing program 1: r0 = getpid() execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) sched_setscheduler(r0, 0x5, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f0000001200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/11) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x400, 0xffffffffffffffff, 0x0) get_thread_area(&(0x7f0000000080)={0x3, 0xffffffffffffffff}) r3 = getpid() r4 = getpid() tkill(r4, 0x1000000000015) r5 = getpgrp(r4) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = socket(0x10, 0x80002, 0x0) close(r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r9, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) kcmp(r3, r5, 0x1, r6, r7) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000100)={0x3}) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_open_dev$video4linux(&(0x7f0000000200)='/dev/v4l-subdev#\x00', 0x9, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = dup3(r10, r11, 0x0) dup2(r13, r12) 22:32:17 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000000c0)=""/73) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='iso9660\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./bus\x00', 0x0, 0xffffffffffffff9d, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[]]) 22:32:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051682c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:17 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:17 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000353582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000185000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 555.175999][ T2500] blk_update_request: I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 22:32:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051782c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 555.227903][T16246] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 22:32:17 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x3, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat(r2, &(0x7f0000000400)='./file0\x00', 0x40, 0x2) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r5 = memfd_create(&(0x7f000003e000)='\'', 0x0) r6 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r7 = dup2(r6, r5) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x80045301, &(0x7f00000001c0)) r8 = socket$unix(0x1, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) fcntl$F_GET_RW_HINT(r8, 0x40b, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505331, &(0x7f0000000480)={{0x9, 0x5}, {0x7, 0x6}, 0x1ff, 0x1, 0x8}) r10 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r11, @ANYBLOB="6600000083bcf0be4e89004b1933552a8bb2f5ff9620a973e29cf580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7910000ce73651368ea4aaf0378ae9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc735b92de0e6392e2706ed317c2b6c5aaf257a2c2dedee8e1b57bb2c98141dcd6417c22d5159791888812083"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r11, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x80, 0x3, 0x8206, 0x8, 0x0, 0x9b, 0x5, 0x40, r11}, 0x20) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x40, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f00000001c0)={0x6, &(0x7f0000000200)="75d7b0f0f8dc55fc21fae8452467227d21c12d706057743ec6a2b5a429eae56fbc6a54937c539b3d74d52f85e7312fbe23ff62ed9577da086d63599addb246994bd977d9923d058ef25588e98ce380b9164743e70000000000010000031d3fa37b5b7b72b821fb"}) r12 = socket(0x10, 0x80002, 0x0) close(r12) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r14, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r12, 0x660c) 22:32:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000004000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:17 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050282c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:17 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051882c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:17 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000025000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 555.536417][T16268] validate_nla: 48 callbacks suppressed [ 555.536499][T16268] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 555.584450][T16272] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 555.672864][T16268] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 555.686818][T16278] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:32:20 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video36\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file0', [{0x20, '{md5sumself'}, {0x20, 'eth0md5sum'}, {0x20, 'syz1\x00'}, {0x20, 'syz2\x00'}, {0x20, 'syz2\x00'}, {0x20, '/dev/btrfs-control\x00'}, {0x20, '/dev/btrfs-control\x00'}], 0xa, "1379"}, 0x5e) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x4081, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40040) 22:32:20 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:20 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000000000000750000000000000063000000000000989500040000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x64) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x4e0143) sendmmsg(r0, &(0x7f0000000380)=[{{&(0x7f0000000080)=@in6={0xa, 0xe0e, 0xf9, @local}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="d49da8501601d258fb69c4295cd85ff98399cf14d0f4e9988938168ff91bab67b6499fe775c4243d9208b60f6d4597fb53ac3a180c0de4d2d48d298567c121aea2be29e894b0ee7209a1250fc10937afda26f91de2b9a2ce8efc84e40a", 0x5d}, {&(0x7f0000000100)="aad784b50bef65e3f8", 0x9}, {&(0x7f00000002c0)="ae35c91672f5c3271a36e544e94513c71f8e7bd9c6a8be8a59eeba102ce0f8bdaeaca3d5c4dd81d367d1ca515ae122e83bac1425f00b67ea6eb64a8b593a3b8e33596d1889c3c4a13a1a69ea5a7767499d2eb3de844923fddc5f8a68901a2b6ab7ec34ea62979b7a", 0x68}], 0x3}}], 0x1, 0x4002) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0xc59, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x2, 0x3}, 0x0, 0x0, &(0x7f0000000440)={0x5, 0x0, 0x7f, 0x9}, &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=0xfffffffffffff801}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600)={r3}, 0xc) 22:32:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051982c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050382c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000035000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 558.397344][T16287] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 558.405641][T16287] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 558.450028][T16290] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 558.483505][T16293] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:32:20 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050482c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051a82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = socket$unix(0x1, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000000c0)={0xff, 0x1, 0x4, 0x100000, 0x468309e0, {}, {0x4, 0x8, 0x7, 0x81, 0x9b, 0x0, '\fB^c'}, 0xfffffffb, 0x1, @offset=0xa3, 0x8001, 0x0, r0}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x220400, 0x41) r8 = socket(0x10, 0x80002, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) getsockname$netlink(r8, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000000180)=0x3) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x4800, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013001d0400000000000000000000003f", @ANYRES32=0x0, @ANYBLOB="0000140003006970766c616e3100"/36], 0x3c}, 0x1, 0xf0}, 0x0) 22:32:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000005a000000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:21 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) accept4$alg(r1, 0x0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) flistxattr(r0, &(0x7f0000000140)=""/48, 0x30) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x12f) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x8, 0xc9b40000, 0x0, 0x3, 0x2, 0x1e, 0xd73, 0x1, 0x7ff, 0x5, 0xffff, 0x9, 0x8000, 0x806, 0x8, 0x20, {0x5, 0xffffffff}, 0x5}}) openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x0) r4 = socket(0x25, 0x2, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) connect$nfc_llcp(r4, &(0x7f0000000400)={0x27, 0x1, 0x2, 0x1, 0x4, 0x1, "e92147de99d90360c26e7804ba4e0561b2437465f210ea46bb80e461a2886ebff7f6cb6aad1cc5a353987dd500c1ee295ccf5ae830591a4a15afd4f4d6b84b", 0x5}, 0x60) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) socket$inet6(0xa, 0x1000000000002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0xa000, 0x0) r8 = socket(0x10, 0x80002, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r11 = socket(0x10, 0x4, 0x6) close(r11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r12, 0x1, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x7c, r10, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_ELP_INTERVAL={0x0, 0x3a, 0x7f}, @BATADV_ATTR_MESH_IFINDEX={0x0, 0x3, r9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240488c3}, 0x0) r13 = dup(r2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) dup3(r7, r13, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r13, 0xc008ae05, &(0x7f0000000040)=""/133) 22:32:21 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x6, &(0x7f0000000080)=[{0x38, 0x20, 0x1, 0xee48}, {0x0, 0x2}, {0x7ff, 0x33, 0x6, 0x6f5d68c5}, {0xfff, 0x7f, 0x20, 0x7aa}, {0x0, 0x34, 0x7f, 0x38}, {0x1, 0x0, 0xed, 0x80000001}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 558.756594][T16306] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 558.760826][T16307] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 558.786393][T16308] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 558.856452][T16314] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 22:32:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc601000000085010000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051b82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:21 executing program 0: r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000180)={{0x3, 0x1}, 'port0\x00', 0x0, 0x20810, 0x8, 0x1cf4, 0x1000, 0x1, 0x200, 0x0, 0x4, 0x7}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000000000000000001460259ed98b000000dce20d62a590c50173a70db784b2cefd2a3e82fa2eb57f0e074832e19d6a23d32eb98e16dee3cbcaba4c4085cb02ade28b800ea28865bf69f1021f677e4e591ab503e50a", @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200140001000000008109f056b0cf9f206df9f0b3001e9057ec3b8258c294569ef2", @ANYRES32=0x0, @ANYBLOB="008a000000070000a76229808e4619468805386e"], 0x48}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_GET_CPUID2(r5, 0xc008ae91, &(0x7f0000000340)={0x2, 0x0, [{}, {}]}) recvmmsg(r0, &(0x7f0000004e00), 0x27b, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0xc, @pix={0x10000, 0x15c, 0x56544943, 0x4, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x2, 0x2}}) 22:32:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4c9]}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0) read(r3, &(0x7f00000001c0)=""/81, 0x51) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r4, 0x4, 0x42000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x8001, 0x41}, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22:32:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000003c290000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050682c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:21 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 559.153130][T16329] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 22:32:21 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051c82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 559.232332][T16331] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 22:32:21 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc6010000000f0f60300053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:21 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050782c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:21 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @remote, 0x6}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000040)={0xa, 0x4625, 0x0, @ipv4={[], [], @local}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x44) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 22:32:21 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051d82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:22 executing program 1: r0 = open(0x0, 0x141042, 0x0) r1 = syz_open_dev$media(0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) sendmsg$unix(0xffffffffffffffff, 0x0, 0x6010) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(r5, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000240)={r6, &(0x7f0000000200)=""/8}) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket(0x10, 0x80002, 0x0) close(r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r9, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r10 = socket(0x10, 0x80002, 0x0) close(r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r12, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r13 = socket(0x10, 0x80002, 0x0) close(r13) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r15 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r15, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r16 = syz_open_dev$mice(&(0x7f00000006c0)='/dev/input/mice\x00', 0x0, 0x400) r17 = dup2(r16, r13) sendmsg$TIPC_NL_NAME_TABLE_GET(r17, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x248, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe4b}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1f5cead7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffc}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc65}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffeb9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffeffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4}, 0x40040) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000380)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000002c0), &(0x7f0000000300)=0x8) r18 = socket(0x10, 0x80002, 0x0) close(r18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r18, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r20 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c00000045112df5ef590dcc0de1ee8cbdf7835c08f5e3c642e6f82361d0a90692e3d6ea993ebaa480cb84883b9cb3", @ANYRES16=r20, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r19, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) r21 = syz_open_dev$media(&(0x7f0000000740)='/dev/media#\x00', 0x5, 0x800) sendto$inet(r21, 0x0, 0x0, 0x8004, &(0x7f0000000700)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0x21e4, 0xf, 0x0, 0xfffffffffffffe2b) write$FUSE_ENTRY(r0, &(0x7f00000000c0)={0x90}, 0x90) 22:32:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050882c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000043582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000051e82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:22 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c7d1670", @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) r4 = memfd_create(&(0x7f000003e000)='\'', 0x0) r5 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x80045301, &(0x7f00000001c0)) r7 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000440)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYBLOB="6600000083bcf0be4e89004b1933552a8bb2f5ff9620a973e28ff580d461da853b8dc998daa1e4e570291e422e402533815ee0acc7913ee2ce73651368ea4aaf03789c9f73eef21f05e8310403164b7aca87feb47b2c73c57aad2d6ce505140aa051d877fe06cac1fcc735b92de0e6392e2706ed317c2b6c5aaf257a2c2dedee8e1b57bb2c98141dcd6417c22d5159791888812083"], 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r8, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e24, @loopback}}, 0x6f8, 0x8}, &(0x7f0000000000)=0x90) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008102e00f80ecdb4cb9d90163190005000f00000600fb120003000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) 22:32:22 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050982c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a020000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:22 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052182c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:22 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:22 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050a82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:22 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a030000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 560.607804][T16400] validate_nla: 22 callbacks suppressed [ 560.607815][T16400] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 560.675841][T16400] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 22:32:23 executing program 1: socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x15) open(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x7f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="9c2940c775a653ce3a7251137a630d21", 0x10) close(r1) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x9e8f, 0x0, 0x1000, 0x1, 0x71, 0x5, 0xe7f6}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') link(0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000001c0)='nbd\x00') r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/null\x00', 0xb4000, 0x0) lstat(0x0, &(0x7f0000000580)) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r4, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) fstat(r4, &(0x7f0000000600)) 22:32:23 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052282c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 560.800336][T16405] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:32:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050b82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a040000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 560.892606][T16411] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:32:23 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 560.961372][T16415] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 560.972875][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 560.991195][T16415] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 22:32:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052382c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:23 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 561.096451][T16422] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:32:23 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket(0x10, 0x80002, 0x0) close(r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$unix(0x1, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) read$eventfd(r5, &(0x7f0000000100), 0x8) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) dup2(r2, r1) rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x40, 0x1d600, 0x5}, 0x1}, 0x20, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x200000000000004) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000200)="480000001400190d09004bb5050d8c560a8447000bffe0064e230f00000000a2bc5603b700000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) 22:32:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050c82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 561.195083][T16429] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:32:23 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a050000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:23 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052482c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 561.306757][T16436] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 561.335595][T16436] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 22:32:23 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050d82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cmdline\x00') r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000780)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000880)=0xe8) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x6) r9 = socket(0x10, 0x80002, 0x0) close(r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r10, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000000480)={@initdev, @initdev, 0x0}, &(0x7f0000000640)=0xc) sendmsg$NL80211_CMD_GET_MPATH(r8, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4001) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {}, {0x2, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000940)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)=@mpls_getnetconf={0x24, 0x52, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r6}, @NETCONFA_IFINDEX={0x8, 0x1, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048041}, 0x10) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r16, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="105644"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="7400000024000705000000000000000000010000", @ANYRES32=r16, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef670000000000000000000000000000001a4e624d29a84abf032657000000000000000000000000000000000000000000000000000000000000000020000089b53c947244306a0216a3de887763df5b42498b13bb1938de859ee6d7ae7dd2224dc672b69b4358c71b170ea0b667832e5224ee3538f885b7abd9bc4a7ddbab915dc5f0428f661313a650e00cb3"], 0x74}}, 0x0) r17 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r16, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000001020898dde66057433b6ef3a41d22be225e0001b0000000000000000000000000017256ffc66e43a2484e1a912c5998bcbf0d0000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745ab00001a9f61f20500000000000000b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) r18 = socket$netlink(0x10, 0x3, 0x0) ioctl(r18, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r19, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r21}}, 0x20}}, 0x0) 22:32:24 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:24 executing program 1: set_mempolicy(0x1, &(0x7f0000000300)=0x762, 0x9) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0fc8)={0x0, 0x0, &(0x7f0000ca6000)={&(0x7f00000003c0)={0x2, 0xd, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@rand_addr="aae920fbb084320423e3d688e2115f55", @in6=@ipv4={[], [], @broadcast}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xa8}}, 0x0) r1 = socket(0x10, 0x80002, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00+1\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00'], 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x2, 0x9}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000480)={r4, 0x1000, "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"}, &(0x7f0000000080)=0x1008) 22:32:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a060000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050e82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x20) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x28f, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 22:32:24 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052682c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a070000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000050f82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:24 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, &(0x7f0000000680)) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='virt_wifi0\x00') 22:32:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052782c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a0a0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:24 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051082c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:24 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') getdents(r1, &(0x7f00000000c0)=""/31, 0x77c) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000100)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x1040, 0x0) 22:32:24 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:24 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a0e0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:25 executing program 0: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)}) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052882c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051182c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:25 executing program 1: syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000000)='./file0\x00', 0x80000000003ff, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000140)="f355981cbfaabc12c61608b74acdc929bac406287aadc4a40dd8f81a1cd763ffc2487af55ec2dc5c80e372ca18f43021e068a0eb2a2165d789e3034787afe8015dd5395a31700fe11406582b8edf7d478f78f1bc8719aa52a6d364f8b61a1754ed5b7764ee819e1119843aaaf2c060", 0x6f, 0x18}, {&(0x7f0000000080)="a623b2c29e2dc0a786c51787e267567f24a2fd1f225b72c0e2845e34ee19ad4eda5025702dedc6cc073357199ade9808975792a45b904164c2b9c6f9", 0x3c, 0x101}], 0x8408, 0x0) 22:32:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a0f0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:25 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 563.087635][T16520] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 22:32:25 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a480000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051282c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 563.141802][T16520] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 563.177699][T16520] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 22:32:25 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052982c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051382c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 563.211831][T16520] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 22:32:25 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 563.351696][T16520] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 563.373921][T16520] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 563.397271][T16520] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 563.417515][T16520] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock 22:32:25 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051482c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3ff, 0x0, 0x6, 0x7, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 22:32:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a4c0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052a82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:26 executing program 1: r0 = socket$inet(0x2, 0x4, 0x1) prctl$PR_GET_DUMPABLE(0x3) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0xff}) fcntl$addseals(r0, 0x409, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x4000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000500)) stat(&(0x7f0000000700)='./file0\x00', &(0x7f00000005c0)) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0xc0300, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xc0201, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0xc1c8, 0x1, 0xe200, 0x2, 0xb, "8c8e348eafc002c1"}) geteuid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0xffffffffffffffff) r5 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) r6 = socket(0x10, 0x80002, 0x0) close(r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r8, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) close(r9) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r11, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000226bd7000fedb0000000008003a000300000000000000000000000000db5228dc45eb6b7d89103a112b597d13bd7c3d432cc95120cb637b07003a7742f2c2ae793c28a9077a222542b5b2e6588501f4d18f75668cdd819b2378d98a99bb6e6ac04f2a143ef90cf801cc2960e065fe5401"], 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x200480c5) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) 22:32:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:26 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051682c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:26 executing program 1: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052b82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a600000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 563.950423][ T27] audit: type=1800 audit(1580769146.345:64): pid=16569 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 22:32:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a680000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052c82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3ff, 0x0, 0x6, 0x7, 0x0, 0x8}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) 22:32:26 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051782c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:26 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a6c0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:26 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:26 executing program 1: getpid() r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r1, @ANYBLOB="08ea0400290000000000"], 0x2c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r4, @ANYBLOB="76030000"], 0x2c}}, 0x0) r6 = getpid() tkill(r6, 0x1000000000015) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000200)=r6) capget(&(0x7f0000000100)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000140)={0xffff, 0x23, 0xc0, 0x2, 0x2, 0x9}) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000300)='/proc/capi/capi20ncci\x00', 0xa000, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xb, 0x11, r11, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000340)=0x10001, 0x4) fcntl$setstatus(r7, 0x4, 0x42000) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9fea01001800000074e8000000000c0000000c00000002000000172d00000000000d030000000000"], &(0x7f0000000240)=""/191, 0x26, 0xbf, 0x8}, 0x20) 22:32:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052d82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052e82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051882c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a740000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:27 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000052f82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:27 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a7a0000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:27 executing program 0: io_setup(0x1, &(0x7f0000000140)=0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x689a1000) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000400)='\x00', 0x1}, 0x0]) r4 = getuid() keyctl$get_persistent(0x16, r4, 0xfffffffffffffff9) 22:32:27 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051982c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053082c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:27 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:29 executing program 1: fchdir(0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) preadv(0xffffffffffffffff, &(0x7f0000000680)=[{0x0}, {&(0x7f00000001c0)=""/151, 0x97}, {0x0}], 0x3, 0x8) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe801}, 0x20000080) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r1, 0x0, 0x0, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f00000003c0)={0x1a, 0x0, 0x4, 0x7, 0x2, 0x8, @broadcast}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000100)={0x2698000000000, 0x40, 0x1}) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x0, 0x100) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x62ae80000000000, 0xfff}, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_KEEPCAPS(0x7) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) 22:32:29 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051a82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:29 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000ad20000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:29 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053182c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:29 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:29 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x34022}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0xee00, r2, r4) mount$9p_tcp(&(0x7f0000000180)='127.0.0.1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x120080, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x6}, 0xfffffffffffffe7f) unshare(0x2000600) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='mountinfo\x00') preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000200)=""/42, 0xa}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0x154}, {&(0x7f0000001380)=""/239, 0xfc36}], 0x96, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r6 = open(0x0, 0x0, 0x0) fcntl$getflags(r6, 0x0) fstat(r6, &(0x7f0000000d00)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x0, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, &(0x7f0000000200)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000004c0)) r8 = socket(0x0, 0x0, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89a2, 0x0) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="02000000489780000000000000000000"]}}, 0x0) gettid() waitid(0x1, 0x0, &(0x7f0000000600), 0x8, &(0x7f00000007c0)) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e23, @remote}], 0x10) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) waitid(0x1, 0x0, &(0x7f0000000580), 0x2, &(0x7f00000007c0)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f00000000c0)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0) waitid(0x0, 0x0, &(0x7f0000000700), 0x2, &(0x7f0000000980)) r10 = socket(0x10, 0x800000000000803, 0x0) sendto(r10, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) recvmmsg(r10, &(0x7f0000004e00), 0x27b, 0x10, 0x0) socket(0x10, 0x0, 0x0) r11 = socket(0x10, 0x800000000000803, 0x0) recvmmsg(r11, 0x0, 0x0, 0x10, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x800) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x10, 0xfa00, {&(0x7f0000000300), r7}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f00000002c0)={0x9, 0x108, 0xfa00, {r7, 0xa7, "625eef", "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"}}, 0x110) ioctl$KVM_GET_CLOCK(0xffffffffffffffff, 0x8030ae7c, &(0x7f0000000480)) bind$inet(0xffffffffffffffff, 0x0, 0x0) [ 567.646298][T16652] validate_nla: 52 callbacks suppressed [ 567.646312][T16652] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 567.666675][T16654] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 567.668218][T16651] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:32:30 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 567.721232][T16654] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 22:32:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053282c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000300053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 567.816033][T16657] mmap: syz-executor.1 (16657) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 22:32:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051b82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 568.014823][T16673] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 568.028985][T16674] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:32:30 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) pipe2$9p(&(0x7f0000000140), 0x4000) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) r3 = socket(0x10, 0x80002, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = socket$unix(0x1, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000240)={0x14}) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r8 = socket(0x10, 0x80002, 0x0) close(r8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @rand_addr="c5e730fff4a928eb05e055ca694b4e34", 0x8e}, 0x1c) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000fcd9fb1c800", @ANYRES32=r9, @ANYBLOB="08002b000000000005002f0000000000"], 0x2c}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=[r3, r8, r1]}, 0x3) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 22:32:30 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = getpid() tkill(r4, 0x1000000000015) syz_open_procfs(r4, &(0x7f0000000100)='net/nf_conntrack\x00') ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f00000000c0)=0x80000000) r5 = socket$inet(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000001a0005041dfffd946f6105000a00000a1f000003141008000800030012000000", 0x24}], 0x1}, 0x0) 22:32:30 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000500053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 568.232616][T16682] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:32:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053382c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 568.288405][T16682] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 568.313024][T16686] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:32:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051c82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:30 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000600053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:30 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 568.424070][T16692] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 22:32:30 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053482c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:30 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051d82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:31 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000700053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:31 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137353e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:31 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r1, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r6, 0x0) r7 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r1, r3, r5, r6, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r7, 0x0, 0x5}) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [{0x2, 0x0, 0xee01}, {}], {}, [{}, {}, {}, {0x8, 0x3}, {0x8, 0x3, r3}, {0x8, 0x2, r10}, {0x8, 0x5, r10}, {0x8, 0x2, r10}], {0x10, 0x3}, {0x20, 0x1}}, 0x74, 0x0) r11 = creat(0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r11, 0x116, 0x80, &(0x7f0000000400)="3a2fd47265207d6bff474790589fc63ad8a53290774693c8da1b859ea27f87f4c3a2335ad217b1d95bd05fbbcbbac032ffd28e507e186f8994f701f5d6666504563cdc0bd9ccaccf8bd8c07fe721c8b2dc9e6482ad1735daf616888b396ac203d910bbdfd78102eccc0125b6ea79c59d0d8962cc7ba9736b82de2313a1b9cd39e8d09849a6815e2c95d4248962b85734cec2637d407a026bb3b9233b924bab946b62ee1e56eb016bd28beb66b03266945b4e9d8b4d665e03401a29184dbe9f1c7db0e99dea19d540e6f27bf2469f3e062ee3fe9b38147c1b77c0483a519fea916d9edb6bffeb5db4d7f00364af05ae", 0xef) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [{@hash='hash'}, {@euid_eq={'euid', 0x3d, r1}}, {@uid_lt={'uid<', r2}}, {@subj_role={'subj_role', 0x3d, 'lowerdir'}}], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setregid(0x0, 0x0) 22:32:33 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000280)={0x56b, 0xb9, 0x8, 0x1, 0xd, 0x3}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$unix(0x1, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) prctl$PR_MCE_KILL_GET(0x22) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r8, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, r11, 0x30, 0x0, @in={0x2, 0x4e20, @multicast1}}}, 0xa0) ioctl$KVM_SET_DEBUGREGS(r6, 0x4080aea2, &(0x7f0000000100)={[], 0x0, 0x0, 0x1}) 22:32:33 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a8d0800053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:33 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000051e82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3703000180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) keyctl$chown(0x12, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r1, r1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r6, 0x0) r7 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r1, r3, r5, r6, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r7, 0x0, 0x5}) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {}, [{0x2, 0x0, 0xee01}, {}], {}, [{}, {}, {}, {0x8, 0x3}, {0x8, 0x3, r3}, {0x8, 0x2, r10}, {0x8, 0x5, r10}, {0x8, 0x2, r10}], {0x10, 0x3}, {0x20, 0x1}}, 0x74, 0x0) r11 = creat(0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r11, 0x116, 0x80, &(0x7f0000000400)="3a2fd47265207d6bff474790589fc63ad8a53290774693c8da1b859ea27f87f4c3a2335ad217b1d95bd05fbbcbbac032ffd28e507e186f8994f701f5d6666504563cdc0bd9ccaccf8bd8c07fe721c8b2dc9e6482ad1735daf616888b396ac203d910bbdfd78102eccc0125b6ea79c59d0d8962cc7ba9736b82de2313a1b9cd39e8d09849a6815e2c95d4248962b85734cec2637d407a026bb3b9233b924bab946b62ee1e56eb016bd28beb66b03266945b4e9d8b4d665e03401a29184dbe9f1c7db0e99dea19d540e6f27bf2469f3e062ee3fe9b38147c1b77c0483a519fea916d9edb6bffeb5db4d7f00364af05ae", 0xef) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [{@hash='hash'}, {@euid_eq={'euid', 0x3d, r1}}, {@uid_lt={'uid<', r2}}, {@subj_role={'subj_role', 0x3d, 'lowerdir'}}], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) setresuid(0x0, 0x0, 0x0) setregid(0x0, 0x0) [ 571.364615][T16736] netlink: 18442 bytes leftover after parsing attributes in process `syz-executor.3'. 22:32:33 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e370a480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:33 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052182c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:33 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a8e0800053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:34 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052282c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000a00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:34 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3735480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:34 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="17a5c8a0b7f069550645a79af2770ca4414697d4260f2f570f67e28eb2c781ae5d9e64f31454f6b9ecfff3c7569599b2088edec35408fc95a6b701000000a4684b3564166432c5f58c0339e72db0c685c825835a3a2589c452c18799d5d9199ae7c3c400b46fedb29400"/115], 0x1) socket$alg(0x26, 0x5, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r4 = dup2(r3, r3) write$P9_RWALK(r4, &(0x7f0000000100)={0x37, 0x6f, 0x0, {0x3, [{}, {}, {}, {}]}}, 0x30) getsockname$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x3b, 0x1) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000240)={0x18, 0x0, 0x5, {0x3}}, 0x18) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 22:32:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000e00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:34 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:34 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052382c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 572.085903][T16766] netlink: 18442 bytes leftover after parsing attributes in process `syz-executor.3'. 22:32:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480280feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 572.345104][ T27] audit: type=1804 audit(1580769154.735:65): pid=16776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir334323432/syzkaller.jMcgqH/393/file0" dev="sda1" ino=17709 res=1 22:32:34 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:34 executing program 0: perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x60d18ea6889c169d}}, 0x50) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) connect$netrom(r2, &(0x7f00000001c0)={{0x3, @null, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b40)={0x21c, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_TX_RATES={0x208, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf4, 0x0, [@NL80211_TXRATE_HT={0x4d, 0x2, "227cb70f701511db49a3e1b739d625c1289f1bb3b7b6940a2f549349ba2ec171fc44420c47c3c396ef9034b48933ab241ebc7a75beb3b2b051a218c5659f7da1100f8a13430968535f"}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "16a1df5f02496b466a1030dff9ee27a46b20a60cd7"}, @NL80211_TXRATE_HT={0x5, 0x2, "d7"}, @NL80211_TXRATE_LEGACY={0x21, 0x1, "3b53215658e5e7c52f43f10cb47400d36ac743c02abf8fbc10ddfb837b"}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x5, 0x1, "da"}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x11, 0x1, "8e54be764e94e069639cef1b1c"}]}, @NL80211_BAND_2GHZ={0x70, 0x0, [@NL80211_TXRATE_HT={0x3d, 0x2, "44dde8d33dbd3b350b9fe01104952c3483c0c51b324c458b9cd2a45ecca744cc70de3c2cc2960908937d941f1e918fe9e809b09b2a1c6728a9"}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, "33edd7b258626a28d02f22c228b81bc6d5a044aca10c1d57b2"}, @NL80211_TXRATE_LEGACY={0x9, 0x1, "6148ba7ac4"}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, "228dbfffe3a9ce6ac5d4b6f205db543a75569df52235521626"}, @NL80211_TXRATE_HT={0x29, 0x2, "440033dbb312dd339082f9509676427fd470e526e779247d974ff0f8f4cd62ff1c8e26a985"}, @NL80211_TXRATE_HT={0xd, 0x2, "d2be113d3917ab3514"}, @NL80211_TXRATE_HT={0x25, 0x2, "448af7628df22ab2077ec937cd4e352b08b9ffdb3ec32dc6f20c596cbd65ee7f36"}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x21c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000000038040000197a0300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4803, 0x0) 22:32:34 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000f00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:34 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052482c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480380feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 572.664791][T16794] validate_nla: 21 callbacks suppressed [ 572.664839][T16794] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 572.688882][T16795] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:32:35 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 572.737573][T16795] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 572.756169][T16792] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 572.778054][T16792] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 22:32:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a002000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 572.846566][T16792] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 572.856665][T16792] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 572.867145][T16792] jbd2_journal_init_inode: Cannot locate journal superblock [ 572.893387][T16792] EXT4-fs (loop0): Could not load journal inode 22:32:35 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 573.034963][T16807] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 573.038528][T16809] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 22:32:35 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 573.176220][T16812] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:32:35 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a004800053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:35 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) read$dsp(r1, &(0x7f00000000c0)=""/200, 0xc8) syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="0201a6ffffff0009274eff07000080ffffff000000000000000100ffffff80ffffffee000004800000000affffff800500004200000000000000ffffdabe", 0x3e, 0x1c0}]) 22:32:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480480feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 573.279120][T16812] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 573.401386][T16820] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 573.432384][T16821] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 22:32:35 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052682c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480880feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 573.606334][T16828] netlink: 'syz-executor.2': attribute type 7 has an invalid length. 22:32:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a004c00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 573.657795][T16826] loop0: p1 p2 p3 p4 p5 p6 p7 p8 22:32:36 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 573.701258][T16826] loop0: partition table partially beyond EOD, truncated 22:32:36 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052782c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 573.817296][T16826] loop0: p1 size 33662719 extends beyond EOD, truncated [ 573.851070][T16826] loop0: p2 size 659488519 extends beyond EOD, truncated 22:32:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a006000053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 573.898095][T16826] loop0: p3 size 4294901760 extends beyond EOD, truncated 22:32:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480980feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 573.960170][T16826] loop0: p4 size 65791 extends beyond EOD, truncated [ 574.011708][T16826] loop0: p5 size 4294962688 extends beyond EOD, truncated [ 574.039230][T16826] loop0: p6 size 2815 extends beyond EOD, truncated 22:32:36 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 574.088557][T16826] loop0: p7 size 16896 extends beyond EOD, truncated [ 574.120698][T16826] loop0: p8 size 65535 extends beyond EOD, truncated 22:32:36 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052882c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:36 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a006800053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:37 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480480feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480a80feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:37 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052982c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a006c00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709482580feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a007400053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052a82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:37 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:37 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) fcntl$setstatus(r4, 0x4, 0x42000) socket$key(0xf, 0x3, 0x2) r5 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200002828c1"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000fff6ffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3}, {0xf}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x38}, 0x10) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r10, @ANYBLOB="010000000000000038154da0002a"], 0x20}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") 22:32:37 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709483580feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:37 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052b82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:37 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a007a00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 575.517972][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 575.524095][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:32:38 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0200d1bd", 0x33fe0}], 0x1}, 0x0) [ 575.597492][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 575.603271][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:32:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a088d00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052c82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) fcntl$setstatus(r4, 0x4, 0x42000) socket$key(0xf, 0x3, 0x2) r5 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200002828c1"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000fff6ffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3}, {0xf}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x38}, 0x10) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r10, @ANYBLOB="010000000000000038154da0002a"], 0x20}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") 22:32:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0300d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a088e00053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052d82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:38 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) [ 576.007521][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 576.013329][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 576.019111][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 576.024861][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:32:38 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x100000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@dots='dots'}]}) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r3, 0x4, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x0, 0x9c, 0x6, r3, 0x0, &(0x7f0000000100)={0x990a92, 0x8, [], @p_u8=&(0x7f0000000000)=0x3f}}) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r5, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000c0}, 0x40080c4) r6 = socket$unix(0x1, 0x1, 0x0) bind$packet(r0, &(0x7f0000000340)={0x11, 0x19, r1, 0x1, 0xff, 0x6, @broadcast}, 0x14) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PPPIOCGIDLE(r7, 0x8010743f, &(0x7f0000000300)) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x61000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="00e5ab00", @ANYRES16=r5, @ANYBLOB="10002dbd7000fcdbdf25020000000800020002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 22:32:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0400d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:38 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) fcntl$setstatus(r4, 0x4, 0x42000) socket$key(0xf, 0x3, 0x2) r5 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000780)={0x0, 0x6, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200002828c1"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000fff6ffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff3}, {0xf}}, [@filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x4}}]}, 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x38}, 0x10) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=r10, @ANYBLOB="010000000000000038154da0002a"], 0x20}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8478071") 22:32:38 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a00d200053582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:38 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000100)={{0x1, 0x0, @identifier="59a929a9cc69dc7437404966eecdae52"}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_type(r0, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x4c000000, 0x400c00) r2 = socket$unix(0x1, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0x69, 0x2, 0x1}) r4 = socket(0x10, 0x80002, 0x0) close(r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {0xf}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x0) open_by_handle_at(r4, &(0x7f0000000040)={0x47, 0x401, "bc958b6fe5e7fd9c49eab0038a1d67b303b458f9583d237ed105ea742dab1f519f0c61390521749092f2409550d6a4ce4776608d4a27464a5182b69545afac"}, 0x202000) 22:32:38 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052e82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:38 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0500d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:39 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000063582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:39 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x80002, 0x0) close(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r1, @ANYBLOB="08002b000000000005002f000066be00"], 0x2c}}, 0x0) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) r3 = getpid() r4 = gettid() tkill(r4, 0x401104000000016) ptrace(0x10, r3) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_LK(r5, &(0x7f0000000300)={0x28, 0x0, 0x5, {{0x401, 0x80000001, 0x2, r3}}}, 0x28) r6 = getpid() tkill(r6, 0x1000000000015) r7 = socket$unix(0x1, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_AIE_OFF(r8, 0x7002) ptrace$peeksig(0x4209, r3, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x5}, &(0x7f0000000000)=[{}, {}, {}, {}, {}]) 22:32:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000052f82c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0600d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:39 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="006d256d00027920"], 0xda00) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x40000, 0x0) write$cgroup_int(r3, &(0x7f0000000100)=0x80000000, 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x6609, 0x0) close(r0) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 22:32:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000093582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053082c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:39 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000240)=""/122) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_subtree(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc0185879, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7302}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000200)={0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(des3_ede),crc32c-generic)\x00'}, 0x80, 0x0}, 0x0) 22:32:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0700d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:39 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000353582c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:39 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r0, &(0x7f0000001cc0), 0x1006) sendfile(r0, r0, &(0x7f0000000240), 0x2008000fffffffe) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) execve(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000300)=[&(0x7f0000000140)='/dev/dri/card#\x00'], &(0x7f0000000440)=[&(0x7f00000003c0)='/dev/ion\x00']) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 22:32:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100000000a000000053582c137153e3709480180feff0a00d1bd", 0x33fe0}], 0x1}, 0x0) 22:32:39 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffef4, &(0x7f0000000080)=[{&(0x7f0000000040)="2e48000028000505d25a80648c63940d0224fc60100007000a000000053182c137153e3709480180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) [ 578.184255][T17011] ================================================================== [ 578.192422][T17011] BUG: KCSAN: data-race in generic_file_read_iter / simple_write_end [ 578.200473][T17011] [ 578.202808][T17011] write to 0xffff8880aad3b640 of 8 bytes by task 17003 on cpu 1: [ 578.210528][T17011] simple_write_end+0x1d0/0x370 [ 578.215380][T17011] generic_perform_write+0x1d3/0x320 [ 578.220755][T17011] __generic_file_write_iter+0x251/0x380 [ 578.226391][T17011] generic_file_write_iter+0x28c/0x38c [ 578.231859][T17011] do_iter_readv_writev+0x487/0x5b0 [ 578.237059][T17011] do_iter_write+0x13b/0x3c0 [ 578.241654][T17011] vfs_iter_write+0x5c/0x80 [ 578.246168][T17011] iter_file_splice_write+0x530/0x840 [ 578.251541][T17011] direct_splice_actor+0xa0/0xc0 [ 578.256497][T17011] splice_direct_to_actor+0x22b/0x540 [ 578.261870][T17011] do_splice_direct+0x161/0x1e0 [ 578.266724][T17011] do_sendfile+0x384/0x7f0 [ 578.271143][T17011] __x64_sys_sendfile64+0xbe/0x140 [ 578.276274][T17011] do_syscall_64+0xcc/0x3a0 [ 578.280787][T17011] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 578.287104][T17011] [ 578.289439][T17011] read to 0xffff8880aad3b640 of 8 bytes by task 17011 on cpu 0: [ 578.297076][T17011] generic_file_read_iter+0x860/0x1440 [ 578.302540][T17011] generic_file_splice_read+0x35c/0x500 [ 578.308088][T17011] do_splice_to+0xf2/0x130 [ 578.312508][T17011] splice_direct_to_actor+0x1b6/0x540 [ 578.317889][T17011] do_splice_direct+0x161/0x1e0 [ 578.322753][T17011] do_sendfile+0x384/0x7f0 [ 578.327178][T17011] __x64_sys_sendfile64+0xbe/0x140 [ 578.332295][T17011] do_syscall_64+0xcc/0x3a0 [ 578.336802][T17011] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 578.342675][T17011] [ 578.345030][T17011] Reported by Kernel Concurrency Sanitizer on: [ 578.351213][T17011] CPU: 0 PID: 17011 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 578.359874][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.369926][T17011] ================================================================== [ 578.377991][T17011] Kernel panic - not syncing: panic_on_warn set ... [ 578.384586][T17011] CPU: 0 PID: 17011 Comm: syz-executor.1 Not tainted 5.5.0-rc1-syzkaller #0 [ 578.393254][T17011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 578.403304][T17011] Call Trace: [ 578.406596][T17011] dump_stack+0x11d/0x181 [ 578.410934][T17011] panic+0x210/0x640 [ 578.414842][T17011] ? vprintk_func+0x8d/0x140 [ 578.419442][T17011] kcsan_report.cold+0xc/0xd [ 578.424041][T17011] kcsan_setup_watchpoint+0x3fe/0x460 [ 578.429423][T17011] __tsan_read8+0xc6/0x100 [ 578.433841][T17011] generic_file_read_iter+0x860/0x1440 [ 578.439323][T17011] generic_file_splice_read+0x35c/0x500 [ 578.444885][T17011] do_splice_to+0xf2/0x130 [ 578.449320][T17011] ? add_to_pipe+0x1c0/0x1c0 [ 578.453903][T17011] ? add_to_pipe+0x1c0/0x1c0 [ 578.458500][T17011] splice_direct_to_actor+0x1b6/0x540 [ 578.463873][T17011] ? generic_pipe_buf_nosteal+0x20/0x20 [ 578.469429][T17011] do_splice_direct+0x161/0x1e0 [ 578.474296][T17011] do_sendfile+0x384/0x7f0 [ 578.478730][T17011] __x64_sys_sendfile64+0xbe/0x140 [ 578.483851][T17011] do_syscall_64+0xcc/0x3a0 [ 578.488370][T17011] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 578.494263][T17011] RIP: 0033:0x45b399 [ 578.498171][T17011] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 578.517779][T17011] RSP: 002b:00007f80cdcd0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 578.526209][T17011] RAX: ffffffffffffffda RBX: 00007f80cdcd16d4 RCX: 000000000045b399 [ 578.534788][T17011] RDX: 0000000020000240 RSI: 0000000000000004 RDI: 0000000000000004 [ 578.542881][T17011] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 578.550868][T17011] R10: 02008000fffffffe R11: 0000000000000246 R12: 00000000ffffffff [ 578.558848][T17011] R13: 00000000000008ca R14: 00000000004ca24d R15: 000000000075c07c [ 578.568377][T17011] Kernel Offset: disabled [ 578.572708][T17011] Rebooting in 86400 seconds..